mbox series

[meta-security,0/4] master-next updates

Message ID cover.1752846514.git.scott.murray@konsulko.com
Headers show
Series master-next updates | expand

Message

Scott Murray July 18, 2025, 2:10 p.m. UTC
Roll up the submissions since the first batch of whinlatter fixes,
plus an upgrade of scap-security-guide to get it building again
after the CMake 4.0 upgrade in oe-core.

A note about the ptest removal for scap-security-guide; while
having comprehensive ptests is desirable, from the commit history
it is clear that there was no interest in banging these ones into
a working state in the last couple of years.  As well, ptests are
not enabled in most of the current CI build configurations, and it
seems clear that the build time hit would be massive in this case
if they were.  If someone motivated to try to investigate resolving
these issues appears, this decision can be revisited.

Changes:

Clayton Casciato (1):
  suricata: fix "interface" arg in systemd service

Haixiao Yan (1):
  samhain: Adapt test output to Automake format for ptest compatibility

Scott Murray (1):
  scap-security-guide: upgrade 0.1.76 -> 0.1.77

Yi Zhao (1):
  scap-security-guide: disable ptest

 .../scap-security-guide/files/run-ptest       |   7 --
 ....1.76.bb => scap-security-guide_0.1.77.bb} |  54 +---------
 ...t-output-to-match-Automake-standards.patch | 102 ++++++++++++++++++
 recipes-ids/samhain/samhain.inc               |   1 +
 recipes-ids/suricata/files/suricata.service   |   2 +-
 5 files changed, 106 insertions(+), 60 deletions(-)
 delete mode 100644 recipes-compliance/scap-security-guide/files/run-ptest
 rename recipes-compliance/scap-security-guide/{scap-security-guide_0.1.76.bb => scap-security-guide_0.1.77.bb} (50%)
 create mode 100644 recipes-ids/samhain/files/0001-Format-test-output-to-match-Automake-standards.patch

Comments

Marta Rybczynska July 20, 2025, 6:26 p.m. UTC | #1
On Fri, Jul 18, 2025 at 4:11 PM Scott Murray via lists.yoctoproject.org
<scott.murray=konsulko.com@lists.yoctoproject.org> wrote:

> Roll up the submissions since the first batch of whinlatter fixes,
> plus an upgrade of scap-security-guide to get it building again
> after the CMake 4.0 upgrade in oe-core.
>
> A note about the ptest removal for scap-security-guide; while
> having comprehensive ptests is desirable, from the commit history
> it is clear that there was no interest in banging these ones into
> a working state in the last couple of years.  As well, ptests are
> not enabled in most of the current CI build configurations, and it
> seems clear that the build time hit would be massive in this case
> if they were.  If someone motivated to try to investigate resolving
> these issues appears, this decision can be revisited.
>
>
Fine for me. This commit leads to a better situation in the CI, OK to merge.

Kind regards,
Marta
Scott Murray July 21, 2025, 5:10 p.m. UTC | #2
On Sun, 20 Jul 2025, Marta Rybczynska via lists.yoctoproject.org wrote:

> On Fri, Jul 18, 2025 at 4:11 PM Scott Murray via lists.yoctoproject.org
> <scott.murray=konsulko.com@lists.yoctoproject.org> wrote:
>
> > Roll up the submissions since the first batch of whinlatter fixes,
> > plus an upgrade of scap-security-guide to get it building again
> > after the CMake 4.0 upgrade in oe-core.
> >
> > A note about the ptest removal for scap-security-guide; while
> > having comprehensive ptests is desirable, from the commit history
> > it is clear that there was no interest in banging these ones into
> > a working state in the last couple of years.  As well, ptests are
> > not enabled in most of the current CI build configurations, and it
> > seems clear that the build time hit would be massive in this case
> > if they were.  If someone motivated to try to investigate resolving
> > these issues appears, this decision can be revisited.
>
> Fine for me. This commit leads to a better situation in the CI, OK to merge.

I have gone ahead and merged the series to master.

Thanks,

Scott