[yocto] [meta-security][PATCH 4/8] openscap: add scap-security-guide

Signed-off-by: Armin Kuster --- .../scap-security-guide_0.1.33.bb | 57 ++ 1 file changed, 57 insertions(+) create mode 100644 meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_0.1.33.bb diff --git

[yocto] [meta-security][PATCH 7/8] os-release: needed by openscap

Signed-off-by: Armin Kuster --- meta-security-compliance/recipes-core/os-release/os-release.bbappend | 4 1 file changed, 4 insertions(+) create mode 100644 meta-security-compliance/recipes-core/os-release/os-release.bbappend diff --git

[yocto] [meta-security][PATCH 8/8] oe-release: add oe-release file for openscap

Signed-off-by: Armin Kuster --- .../openembedded-release_1.0.bb| 32 ++ 1 file changed, 32 insertions(+) create mode 100644 meta-security-compliance/recipes-core/openembedded-release/openembedded-release_1.0.bb diff --git

[yocto] [meta-security][PATCH 6/8] openscap: Add oe specific files

Signed-off-by: Armin Kuster --- .../files/OpenEmbedded_nodistro_0.xccdf.xml| 14 .../oe-scap/files/OpenEmbedded_nodistro_0.xml | 83 ++ .../oe-scap/files/oval-to-xccdf.xslt | 72 +++

[yocto] [meta-security][PATCH 3/8] openscap: add package

Signed-off-by: Armin Kuster --- .../openscap/files/crypto_pkgconfig.patch | 36 ++ .../openscap/files/probe_dir_fixup.patch | 17 + .../recipes-openscap/openscap/files/run-ptest | 3 + .../recipes-openscap/openscap/openscap.inc |

[yocto] [meta-security][PATCH 5/8] openscap: add dameon

Signed-off-by: Armin Kuster --- .../openscap-daemon/openscap-daemon_0.1.6.bb | 18 ++ 1 file changed, 18 insertions(+) create mode 100644 meta-security-compliance/recipes-openscap/openscap-daemon/openscap-daemon_0.1.6.bb diff --git

[yocto] [meta-security][PATCH 2/8] lynis: add auditing tool

Signed-off-by: Armin Kuster --- recipes-auditors/lynis/lynis_2.5.1.bb | 41 +++ 1 file changed, 41 insertions(+) create mode 100644 recipes-auditors/lynis/lynis_2.5.1.bb diff --git a/recipes-auditors/lynis/lynis_2.5.1.bb

[yocto] [meta-security][PATCH 1/8] meta-security-compliance: add new layer for compliance and audit applications

Signed-off-by: Armin Kuster --- meta-security-compliance/README | 41 meta-security-compliance/conf/layer.conf | 13 ++ 2 files changed, 54 insertions(+) create mode 100644 meta-security-compliance/README create mode

[yocto] Adding security audit tools

Lynis and openscap are both compliance tools. This provides the basic framework. The os-release and oe-release recipes will be moved and really belong in a distro or other solution layer, IMHO. I have not figured out the companion layer yet. This makes it useable. [meta-security][PATCH 1/8]

[yocto] [meta-security][PATCH] clamav: update llvm to use 5.0 to match version in core

Signed-off-by: Armin Kuster --- recipes-security/clamav/clamav_0.99.2.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/clamav/clamav_0.99.2.bb b/recipes-security/clamav/clamav_0.99.2.bb index c755a64..5dfda8f 100644 ---

Re: [yocto] advice on recipe for shared lib mDNSResponder

On Friday, 29 September 2017 1:44:13 PM NZDT Andre McCurdy wrote: > On Thu, Sep 28, 2017 at 5:11 PM, Andre McCurdy wrote: > > On Thu, Sep 28, 2017 at 3:30 PM, Paul Eggleton > > wrote: > >> Hi Steve, > >> > >> On Friday, 29 September 2017

Re: [yocto] advice on recipe for shared lib mDNSResponder

On Thu, Sep 28, 2017 at 5:11 PM, Andre McCurdy wrote: > On Thu, Sep 28, 2017 at 3:30 PM, Paul Eggleton > wrote: >> Hi Steve, >> >> On Friday, 29 September 2017 5:29:32 AM NZDT Steve Pavao wrote: >>> I was unable to successfully build that

Re: [yocto] advice on recipe for shared lib mDNSResponder

On Thu, Sep 28, 2017 at 3:30 PM, Paul Eggleton wrote: > Hi Steve, > > On Friday, 29 September 2017 5:29:32 AM NZDT Steve Pavao wrote: >> I was unable to successfully build that recipe here, though. I’ll check >> with the maintainers to ask why. >> >> All I did was

Re: [yocto] advice on recipe for shared lib mDNSResponder

Hi Steve, On Friday, 29 September 2017 5:29:32 AM NZDT Steve Pavao wrote: > I was unable to successfully build that recipe here, though. I’ll check > with the maintainers to ask why. > > All I did was clone the meta-intel-iot-middleware repo, add that layer to > bblayers.conf, and add mdns to

Re: [linux-yocto] [linux-yocto-4.8][PATCH] mm/workingset.c: fix implicit declaration of __list_lru_init_key

On 09/28/2017 07:53 AM, Paul Gortmaker wrote: [[linux-yocto-4.8][PATCH] mm/workingset.c: fix implicit declaration of __list_lru_init_key] On 22/09/2017 (Fri 15:48) California Sullivan wrote: __list_lru_init_key does not exist. We're looking for __list_lru_init as shown in the patch "26690f5

Re: [yocto] want to execute a script having sudo : sudo cryptsetup

On 2017-09-27 01:28 PM, John Finley wrote: pseudo can't do some of the cryptsetup functions that really require root, or at least I could not convince it to. Using sudo is not so good, but I don't think there's an easy way around it for the cryptsetup stuff. If you can narrow down what's

Re: [yocto] advice on recipe for shared lib mDNSResponder

Hello, Thanks so much for the great and useful information from you and Ross. I was unable to successfully build that recipe here, though. I’ll check with the maintainers to ask why. All I did was clone the meta-intel-iot-middleware repo, add that layer to bblayers.conf, and add mdns to

Re: [linux-yocto] [linux-yocto-4.8][PATCH] mm/workingset.c: fix implicit declaration of __list_lru_init_key

[[linux-yocto-4.8][PATCH] mm/workingset.c: fix implicit declaration of __list_lru_init_key] On 22/09/2017 (Fri 15:48) California Sullivan wrote: > __list_lru_init_key does not exist. We're looking for __list_lru_init as > shown in the patch "26690f5 mm: workingset: fix premature shadow node I

[yocto] SSTATE_DIR not working with multi user environment

Hi this is a follow up to another thread called "Unclear sstate-cache dir permissions" I am trying to share a sstate-cache between two (or more) users in a shared directory. Although I set the directory owner, group and permissions I face to a weird condition that I don't understand and seems to

Re: [yocto] Errors building with Windows Subsystem for Linux (aka Bash on Ubuntu on Windows)

Ross, From: Burton, Ross [mailto:ross.bur...@intel.com] Sent: Wednesday, September 27, 2017 6:43 PM To: Bryan Evenson Cc: yocto@yoctoproject.org Subject: Re: [yocto] Errors building with Windows Subsystem for Linux (aka Bash on Ubuntu on Windows) On 27 September 2017

[yocto] toasterconf.json

hi, I setted up a toaster configuration. but there are few incoherent things with manual: 1/ I can not find any toasterconf.json file 2/ the toaster interface runs but if try to use "local yocto project", no compatible layers are displayed (openembedded-core,meta-poky...) Regards,

Re: [yocto] advice on recipe for shared lib mDNSResponder

On 27 September 2017 at 23:58, Steve Pavao wrote: > I am fairly new to Yocto, yet have been able to successfully add a custom > kernel object to my Yocto poky build, no problem. However, I am having > some difficulty adding a shared library, namely mDNSResponder. > Andre has

Re: [yocto] Fwd: do_configure error

On 28 September 2017 at 05:51, Khem Raj wrote: > On Sat, Sep 23, 2017 at 12:33 PM, Burton, Ross > wrote: > > On 23 September 2017 at 06:56, mohammed aqdam > > wrote: > >> > >> i'm getting the following error... > >> > >>

[yocto] weston and xorg-xserver fail to build when using Raspberry Pi 3 user land

Hi everyone, I noticed that if I changed the provider for virtual/mesa (in particular, virtual/egl) to 'userland' for a raspberry pi 3 build, bitbake fails to resolve the dependency chain, complaining about missing RPROVIDES libegl. The point is that NO libegl is ever provided, only "egl"

Re: [yocto] do_populate_sdk_ext always being triggered

On Wed, Sep 27, 2017 at 9:52 PM, Paul Eggleton < paul.eggle...@linux.intel.com> wrote: > Hi Andrea, > > On Wednesday, 27 September 2017 10:17:42 PM NZDT Andrea Galbusera wrote: > > I noticed that periodically running 'bitbake -c do_populate_sdk_ext' for > an > > image in my CI loop does always

Re: [yocto] [meta-intel] meta-intel has been split into meta-dpdk and meta-intel-qat

On Thu, 2017-09-28 at 11:32 +0800, Lai Eddy wrote: > is this mean I don't need meta-intel anymore? (but still can be found > in the git) > just choose to use meta-dpdk and/or meta-intel-qat > If you are building an Intel target, I would suggest you still use meta-intel. The DPDK and QAT are