[yocto] [meta-security][PATCH] packagegroups: add a few more catagories

Armin Kuster akuster808 at gmail.com
Tue Sep 30 20:39:15 PDT 2014


Add tripwire, samhain and checksec packages
fix ccs-tools to exclude if no kernel support

Signed-off-by: Armin Kuster <akuster808 at gmail.com>
---
 .../packagegroup/packagegroup-core-security.bb            | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb b/recipes-security/packagegroup/packagegroup-core-security.bb
index 25f9f1f..50208d0 100644
--- a/recipes-security/packagegroup/packagegroup-core-security.bb
+++ b/recipes-security/packagegroup/packagegroup-core-security.bb
@@ -9,15 +9,20 @@ PACKAGES = "\
     packagegroup-core-security \
     packagegroup-security-utils \
     packagegroup-security-scanners \
+    packagegroup-security-ids  \
+    packagegroup-security-mac  \
     "
 
 RDEPENDS_packagegroup-core-security = "\
     packagegroup-security-utils \
     packagegroup-security-scanners \
+    packagegroup-security-ids  \
+    packagegroup-security-mac  \
     "
 
 SUMMARY_packagegroup-security-utils = "Security utilities"
 RDEPENDS_packagegroup-security-utils = "\
+    checksec \
     nmap \
     libseccomp \
     pinentry \
@@ -41,3 +46,13 @@ RDEPENDS_packagegroup-security-hardening = " \
     bastille \
     "
 
+SUMMARY_packagegroup-security-ids = "Security Intrusion Detection systems"
+RDEPENDS_packagegroup-security-ids = " \
+    tripwire \
+    samhain-client \
+    "
+
+SUMMARY_packagegroup-security-mac = "Security Mandatory Access Control systems"
+RDEPENDS_packagegroup-security-mac = " \
+    ${@bb.utils.contains("DISTRO_FEATURES", "tomoyo", "ccs-tools", "",d) \
+    "
-- 
1.9.1




More information about the yocto mailing list