BMC/Intel-BMC/openbmc.git/meta-security, branch validation

meta-security: subtree update:b72cc7f87c..95fe86eb98

2020-05-21T20:43:47+00:00

André Draszik (1): linux-yocto: update the bbappend to 5.x Armin Kuster (36): README: add pull request option sssd: drop py2 support python3-fail2ban: update to latest Apparmor: fix some runtime depends linux-yocto-dev: remove "+" checksecurity: fix runtime issues buck-security: fix rdebends and minor style cleanup swtpm: fix configure error ecryptfs-utils: search nspr header files in ${STAGING_INCDIR}/nspr directory bastille: convert to py3 tpm2-tools: update to 4.1.1 tpm2-tcti-uefi: fix build issue for i386 machine tpm2-tss: update to 2.3.2 ibmswtpm2: update to 1563 python3-fail2ban: add 2-3 conversion changes google-authenticator-libpam: install module in pam location apparmor: update to tip clamav: add bison-native to depend meta-security-isafw: import layer from Intel isafw: fix to work against master layer.conf: add zeus README.md: update to new maintainer clamav-native: missed bison fix secuirty*-image: remove dead var and minor cleanup libtpm: fix build issue over pod2man sssd: python2 not supported libseccomp: update to 2.4.3 lynis: add missing rdepends fail2ban: change hardcoded sysklogd to VIRTUAL-RUNTIME_base-utils-syslog chkrootkit: add rootkit recipe clamav: move to recipes-scanners checksec: move to recipe-scanners checksecurity: move to recipes-scanners buck-security: move to recipes-scanners arpwatch: add new recipe buck-security: fix runtime issue with missing per module Bartosz Golaszewski (3): linux: drop the bbappend for linux v4.x series classes: provide a class for generating dm-verity meta-data images dm-verity: add a working example for BeagleBone Black Haseeb Ashraf (1): samhain: dnmalloc hash fix for aarch64 and mips64 Jan Luebbe (2): apparmor: fix wrong executable permission on service file apparmor: update to 2.13.4 Jonatan Pålsson (10): README: Add meta-python to list of layer deps sssd: Add PACKAGECONFIG for python2 sssd: Fix typo in PACKAGECONFIG. cyrpto -> crypto sssd: DEPEND on nss if nothing else is chosen sssd: Sort PACKAGECONFIG entries sssd: Add autofs PACKAGECONFIG sssd: Add sudo PACKAGECONFIG sssd: Add missing files to SYSTEMD_SERVICE sssd: Add missing DEPENDS on jansson sssd: Add infopipe PACKAGECONFIG Kai Kang (1): sssd: fix for ldblibdir and systemd etc Martin Jansa (1): layer.conf: update LAYERSERIES_COMPAT for dunfell Mingli Yu (1): linux-yocto: update the bbappend to 5.x Pierre-Jean Texier via Lists.Yoctoproject.Org (1): google-authenticator-libpam: upgrade 1.07 -> 1.08 Yi Zhao (5): samhain: fix build with new version attr scap-security-guide: fix xml parsing error when build remediation files scap-security-guide: pass the correct schema file path to openscap-native openscap-daemon: add missing runtime dependencies samhain-server: add volatile file for systemd Change-Id: I3d4a4055cb9420e97d3eacf8436d9b048d34733f Signed-off-by: Andrew Geissler

meta-security: subtree update:3001c3ebfc..b72cc7f87c

2020-01-06T14:48:43+00:00

Armin Kuster (10): apparmor: add distro check smack: add distro check python-fail2ban: Drop python2 package python3-fail2ban: include python-fail2ban.inc google-authenticator-libpam: update to 1.07 smack-test: add feature check for smack lib/oeqa/runtime: fix clamav test order clamav: update to 0.101.5 meta-integrity: fix issues with yocto-check-layer fail2ban: fix runtime error Change-Id: I4f7e656b0f9e2e9dc32989a1756c94e4e0143c42 Signed-off-by: Brad Bishop

meta-security: subtree update:2df7dd9fba..3001c3ebfc

2019-12-19T21:39:27+00:00

Armin Kuster (6): meta-security: add layer index callouts meta-security-compliance/conf/layer.conf: fix typo python3-suricata-update: update to 1.1.1 libhtp: bugfix only update 0.5.32 lib/oeqa/runtime: suricata add tests suricata: update to 4.1.6 Philip Tricca (1): tpm2-abrmd: Port command line options to new version. Trevor Woerner (1): tpm2-abrmd-init.sh: fix for /dev/tpmrmX Yi Zhao (1): libseccomp: upgrade 2.4.1 -> 2.4.2 Change-Id: Ic00ca8ac8ff5d3fbe0b79aa4a42243b197080f14 Signed-off-by: Brad Bishop

meta-security: subtree update:fa800e5261..2df7dd9fba

2019-12-06T15:10:30+00:00

Armin Kuster (6): tpm2-pkcs11: update to tip tpm2-abrmd": update to 2.3.0 tpm2-tools: update to 4.0.1 tpm2-tss-engine: update to tip to us tss-tools 4.0.x tpm2-totp: update to 0.2.0 README: update mailing list to new groups.io Change-Id: Iae675505d3cf5b70686599a26d9162bb8aaee1b3 Signed-off-by: Brad Bishop

meta-security: subtree update:27ddb45554..fa800e5261

2019-12-02T18:55:26+00:00

Christophe PRIOUZEAU (1): cryptsetup tpm incubator: fix installed vs shipped Christopher Larson (3): checksecurity: use more portable find args clamav: add tmpfiles.d config suricata: add tmpfiles.d config Ming Liu (1): meta: inherit features_check instead of distro_features_check Norbert Kaminski (1): meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.1.bb: add new udev dir to FILES and append EXTRA_OECONF Change-Id: I51369027c747f12d64adb8dbe0262dfb96937ad1 Signed-off-by: Brad Bishop

meta-security: subtree update:c55721b15e..27ddb45554

2019-10-21T12:43:47+00:00

Armin Kuster (2): apparmor: fix systemd support so it works apparmor: ptest fail to build on arm Change-Id: Ibe394a28d6fef07dd97031c6e24b4d7e9edf8cfb Signed-off-by: Brad Bishop

meta-security: subtree update:400eade386..c55721b15e

2019-10-16T18:23:15+00:00

Armin Kuster (2): suricata: fix compile issue checksec: add missing rdepends to readelf Change-Id: Ib50c6bd74004c9cb0241bc70f8df5d90f45f5afe Signed-off-by: Brad Bishop

meta-security: subtree update:a0dee993cd..400eade386

2019-10-15T11:47:39+00:00

Alexander Kanavin (2): apparmor: add PRIVATE_LIBS for ptest package apparmor: make bash dependency optional Change-Id: Ic94b09e29b33bcda2bb054e0915e69ad1afc44d5 Signed-off-by: Brad Bishop

meta-security: subtree update:caaeb67863..a0dee993cd

2019-10-14T15:16:09+00:00

Armin Kuster (1): layer.conf: Update for zeus series Change-Id: I23627a0fcc2a55a051cb6c77af5fd3a569d5b1a2 Signed-off-by: Brad Bishop

meta-security: subtree update:86ba098074..caaeb67863

2019-10-09T14:30:41+00:00

Armin Kuster (2): suricata/libhtp: update to 4.1.5/0.5.31 suricata-update: add package to pull rules Change-Id: I474794e67126b8f197432a06ce76a9fcde842608 Signed-off-by: Brad Bishop