Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 1 | DESCRIPTION = "Security packagegroup for Poky" |
| 2 | LICENSE = "MIT" |
| 3 | LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302 \ |
| 4 | file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420" |
| 5 | |
| 6 | inherit packagegroup |
| 7 | |
| 8 | PACKAGES = "\ |
| 9 | packagegroup-core-security \ |
| 10 | packagegroup-security-utils \ |
| 11 | packagegroup-security-scanners \ |
Andrew Geissler | cc58928 | 2020-09-18 13:34:40 -0500 | [diff] [blame] | 12 | packagegroup-security-audit \ |
| 13 | packagegroup-security-hardening \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 14 | packagegroup-security-ids \ |
| 15 | packagegroup-security-mac \ |
Andrew Geissler | d1d22e6 | 2020-10-16 10:14:32 -0500 | [diff] [blame] | 16 | ${@bb.utils.contains("DISTRO_FEATURES", "ptest", "packagegroup-meta-security-ptest-packages", "", d)} \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 17 | " |
| 18 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 19 | RDEPENDS:packagegroup-core-security = "\ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 20 | packagegroup-security-utils \ |
| 21 | packagegroup-security-scanners \ |
Andrew Geissler | cc58928 | 2020-09-18 13:34:40 -0500 | [diff] [blame] | 22 | packagegroup-security-audit \ |
| 23 | packagegroup-security-hardening \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 24 | packagegroup-security-ids \ |
| 25 | packagegroup-security-mac \ |
Andrew Geissler | d1d22e6 | 2020-10-16 10:14:32 -0500 | [diff] [blame] | 26 | ${@bb.utils.contains("DISTRO_FEATURES", "ptest", "packagegroup-meta-security-ptest-packages", "", d)} \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 27 | " |
| 28 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 29 | SUMMARY:packagegroup-security-utils = "Security utilities" |
| 30 | RDEPENDS:packagegroup-security-utils = "\ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 31 | checksec \ |
Andrew Geissler | cc58928 | 2020-09-18 13:34:40 -0500 | [diff] [blame] | 32 | ding-libs \ |
| 33 | ecryptfs-utils \ |
| 34 | fscryptctl \ |
| 35 | keyutils \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 36 | nmap \ |
| 37 | pinentry \ |
Andrew Geissler | cc58928 | 2020-09-18 13:34:40 -0500 | [diff] [blame] | 38 | python3-privacyidea \ |
| 39 | python3-fail2ban \ |
Andrew Geissler | d1d22e6 | 2020-10-16 10:14:32 -0500 | [diff] [blame] | 40 | softhsm \ |
| 41 | libest \ |
| 42 | opendnssec \ |
Andrew Geissler | 59125e0 | 2021-07-23 12:56:22 -0400 | [diff] [blame] | 43 | sshguard \ |
Andrew Geissler | b2fe863 | 2020-08-21 15:57:21 -0500 | [diff] [blame] | 44 | ${@bb.utils.contains_any("TUNE_FEATURES", "riscv32 ", "", " libseccomp",d)} \ |
Andrew Geissler | cc58928 | 2020-09-18 13:34:40 -0500 | [diff] [blame] | 45 | ${@bb.utils.contains("DISTRO_FEATURES", "pam", "sssd google-authenticator-libpam", "",d)} \ |
| 46 | ${@bb.utils.contains("DISTRO_FEATURES", "pax", "pax-utils packctl", "",d)} \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 47 | " |
| 48 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 49 | SUMMARY:packagegroup-security-scanners = "Security scanners" |
| 50 | RDEPENDS:packagegroup-security-scanners = "\ |
Andrew Geissler | cc58928 | 2020-09-18 13:34:40 -0500 | [diff] [blame] | 51 | isic \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 52 | nikto \ |
| 53 | checksecurity \ |
William A. Kennington III | ee32beb | 2021-06-02 12:48:35 -0700 | [diff] [blame] | 54 | ${@bb.utils.contains_any("TUNE_FEATURES", "riscv32 riscv64", "", " clamav clamav-daemon clamav-freshclam",d)} \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 55 | " |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 56 | RDEPENDS:packagegroup-security-scanners:remove:libc-musl = "clamav clamav-daemon clamav-freshclam" |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 57 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 58 | SUMMARY:packagegroup-security-audit = "Security Audit tools " |
| 59 | RDEPENDS:packagegroup-security-audit = " \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 60 | buck-security \ |
| 61 | redhat-security \ |
| 62 | " |
| 63 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 64 | SUMMARY:packagegroup-security-hardening = "Security Hardening tools" |
| 65 | RDEPENDS:packagegroup-security-hardening = " \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 66 | bastille \ |
| 67 | " |
| 68 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 69 | SUMMARY:packagegroup-security-ids = "Security Intrusion Detection systems" |
| 70 | RDEPENDS:packagegroup-security-ids = " \ |
Brad Bishop | 1a4b7ee | 2018-12-16 17:11:34 -0800 | [diff] [blame] | 71 | samhain-standalone \ |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 72 | ${@bb.utils.contains("BBLAYERS", "meta-rust", "suricata","", d)} \ |
William A. Kennington III | ee32beb | 2021-06-02 12:48:35 -0700 | [diff] [blame] | 73 | ossec-hids \ |
| 74 | aide \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 75 | " |
| 76 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 77 | RDEPENDS:packagegroup-security-ids:remove:powerpc = "suricata" |
| 78 | RDEPENDS:packagegroup-security-ids:remove:powerpc64le = "suricata" |
| 79 | RDEPENDS:packagegroup-security-ids:remove:powerpc64 = "suricata" |
| 80 | RDEPENDS:packagegroup-security-ids:remove:riscv32 = "suricata" |
| 81 | RDEPENDS:packagegroup-security-ids:remove:riscv64 = "suricata" |
| 82 | RDEPENDS:packagegroup-security-ids:remove:libc-musl = "ossec-hids" |
Andrew Geissler | a1a6aef | 2021-06-25 14:23:58 -0500 | [diff] [blame] | 83 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 84 | SUMMARY:packagegroup-security-mac = "Security Mandatory Access Control systems" |
| 85 | RDEPENDS:packagegroup-security-mac = " \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 86 | ${@bb.utils.contains("DISTRO_FEATURES", "tomoyo", "ccs-tools", "",d)} \ |
Brad Bishop | 1a4b7ee | 2018-12-16 17:11:34 -0800 | [diff] [blame] | 87 | ${@bb.utils.contains("DISTRO_FEATURES", "apparmor", "apparmor", "",d)} \ |
Richard Marian Thomaiyar | 14fddef | 2018-07-13 23:55:56 +0530 | [diff] [blame] | 88 | ${@bb.utils.contains("DISTRO_FEATURES", "smack", "smack", "",d)} \ |
| 89 | " |
Andrew Geissler | d1d22e6 | 2020-10-16 10:14:32 -0500 | [diff] [blame] | 90 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 91 | RDEPENDS:packagegroup-security-mac:remove:mipsarch = "apparmor" |
Andrew Geissler | 5e7fd51 | 2021-05-07 16:09:00 -0500 | [diff] [blame] | 92 | |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 93 | RDEPENDS:packagegroup-meta-security-ptest-packages = "\ |
Andrew Geissler | d1d22e6 | 2020-10-16 10:14:32 -0500 | [diff] [blame] | 94 | ptest-runner \ |
| 95 | samhain-standalone-ptest \ |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 96 | ${@bb.utils.contains("BBLAYERS", "meta-rust", "suricata-ptest","", d)} \ |
Andrew Geissler | d1d22e6 | 2020-10-16 10:14:32 -0500 | [diff] [blame] | 97 | python3-fail2ban-ptest \ |
| 98 | ${@bb.utils.contains("DISTRO_FEATURES", "smack", "smack-ptest", "",d)} \ |
| 99 | " |
Patrick Williams | 213cb26 | 2021-08-07 19:21:33 -0500 | [diff] [blame] | 100 | |
| 101 | RDEPENDS:packagegroup-security-ptest-packages:remove:powerpc = "suricata-ptest" |
| 102 | RDEPENDS:packagegroup-security-ptest-packages:remove:powerpc64le = "suricata-ptest" |
| 103 | RDEPENDS:packagegroup-security-ptest-packages:remove:powerpc64 = "suricata-ptest" |
| 104 | RDEPENDS:packagegroup-security-ptest-packages:remove:riscv32 = "suricata-ptest" |
| 105 | RDEPENDS:packagegroup-security-ptest-packages:remove:riscv64 = "suricata-ptest" |