[yocto] [meta-security][PATCH] paxctl: add new recipe

akuster808 akuster808 at gmail.com
Thu Sep 17 09:49:09 PDT 2015


In queue for merging.

thanks,
Armin

On 09/14/2015 09:32 AM, Jagadeesh Krishnanjanappa wrote:
> paxctl  is  a tool that allows PaX flags to be modified on a per-binary
> basis.  PaX is part of common  security-enhancing  kernel  patches  and
> secure distributions, such as GrSecurity or Adamantix and Hardened Gen-
> too, respectively.  Your system needs to be running a properly  patched
> and configured kernel for this program to have any effect.
> 
> Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa at mvista.com>
> Signed-off-by: Jeremy Puhlman <jpuhlman at mvista.com>
> ---
>  recipes-security/paxctl/paxctl_0.9.bb | 20 ++++++++++++++++++++
>  1 file changed, 20 insertions(+)
>  create mode 100644 recipes-security/paxctl/paxctl_0.9.bb
> 
> diff --git a/recipes-security/paxctl/paxctl_0.9.bb b/recipes-security/paxctl/paxctl_0.9.bb
> new file mode 100644
> index 0000000..8eadad1
> --- /dev/null
> +++ b/recipes-security/paxctl/paxctl_0.9.bb
> @@ -0,0 +1,20 @@
> +DESCRIPTION = "paxctl  is  a tool that allows PaX flags to be modified on a \
> +               per-binary basis. PaX is part of common  security-enhancing  \
> +               kernel  patches  and secure distributions, such as \
> +               GrSecurity or Adamantix and Hardened Gen-too, respectively."
> +HOMEPAGE = "https://pax.grsecurity.net/"	       
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://paxctl.c;beginline=1;endline=5;md5=0ddd065c61020dda79729e6bedaed2c7 \
> +                    file://paxctl-elf.c;beginline=1;endline=5;md5=99f453ce7f6d1687ee808982e2924813 \
> +		   "
> +
> +SRC_URI = "http://pax.grsecurity.net/paxctl-${PV}.tar.gz"
> +SRC_URI[md5sum] = "9bea59b1987dc4e16c2d22d745374e64"
> +SRC_URI[sha256sum] = "a330ddd812688169802a3ba29e5e3b19956376b8f6f73b8d7e9586eb04423c2e"
> +
> +do_install() {
> +	oe_runmake 'DESTDIR=${D}' install
> +}
> +
> +FILES_${PN} = "${base_sbindir}/paxctl"
> +FILES_${PN}-doc = "${mandir}/man1/paxctl.1"
> 



More information about the yocto mailing list