[meta-security,14/18] harden.conf: exapand debug-tweaks

Message ID	20241220140441.271395-15-mikko.rapeli@linaro.org
State	New
Headers	show Return-Path: <mikko.rapeli@linaro.org> ip: 209.85.167.51, mailfrom: mikko.rapeli@linaro.org) From: Mikko Rapeli <mikko.rapeli@linaro.org> To: yocto-patches@lists.yoctoproject.org Cc: Mikko Rapeli <mikko.rapeli@linaro.org> Subject: [meta-security][PATCH 14/18] harden.conf: exapand debug-tweaks Date: Fri, 20 Dec 2024 16:04:37 +0200 Message-ID: <20241220140441.271395-15-mikko.rapeli@linaro.org> In-Reply-To: <20241220140441.271395-1-mikko.rapeli@linaro.org> References: <20241220140441.271395-1-mikko.rapeli@linaro.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	various updates \| expand [meta-security,00/18] various updates [meta-security,01/18] kas-security-base.yml: replace debug-tweaks [meta-security,02/18] kas-security-alt.yml: fix systemd config [meta-security,03/18] chkrootkit: change download from Ubuntu to Debian [meta-security,04/18] apparmor: update from 3.1.3 to 4.0.3 [meta-security,05/18] oeqa runtime clamav.py: use curl if ping fails [meta-security,06/18] libtpm: update from 0.9.6 to 0.10.0 [meta-security,07/18] libtpm: rename to libtpms [meta-security,08/18] libtpms: set CVE_PRODUCT [meta-security,09/18] swtpm: update from 0.8.2 to 0.10.0 [meta-security,10/18] tpm2-tools: add dependency to efivar [meta-security,11/18] u-boot: enable TPM support via "tpm2" in MACHINE_FEATURES [meta-security,12/18] systemd: enable TPM support [meta-security,13/18] systemd-boot: enable TPM support via "tpm2" in DISTRO_FEATURES [meta-security,14/18] harden.conf: exapand debug-tweaks [meta-security,15/18] linux-yocto: enable ecryptfs [meta-security,16/18] ecryptfs-utils: depend on ecryptfs kernel module [meta-security,17/18] oeqa runtime clamav.py: skip test_freshclam_download with systemd [meta-security,18/18] oeqa runtime ima.py: skip without "integrity" in DISTRO_FEATURES

Message ID

20241220140441.271395-15-mikko.rapeli@linaro.org

State

New

Headers

From: Mikko Rapeli <mikko.rapeli@linaro.org>
To: yocto-patches@lists.yoctoproject.org
Cc: Mikko Rapeli <mikko.rapeli@linaro.org>
Subject: [meta-security][PATCH 14/18] harden.conf: exapand debug-tweaks
Date: Fri, 20 Dec 2024 16:04:37 +0200
Message-ID: <20241220140441.271395-15-mikko.rapeli@linaro.org>
In-Reply-To: <20241220140441.271395-1-mikko.rapeli@linaro.org>
References: <20241220140441.271395-1-mikko.rapeli@linaro.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

various updates | expand

Commit Message

Mikko Rapeli Dec. 20, 2024, 2:04 p.m. UTC

debug-tweaks was replaced with allow-empty-password empty-root-password
and allow-root-login so remove them from build config.

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
---
 meta-hardening/conf/distro/harden.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-hardening/conf/distro/harden.conf b/meta-hardening/conf/distro/harden.conf
index 1a5eb3d..2553152 100644
--- a/meta-hardening/conf/distro/harden.conf
+++ b/meta-hardening/conf/distro/harden.conf
@@ -6,6 +6,6 @@  DISTRO_FEATURES = " acl xattr pci ext2 pam ipv4 ipv6 ipsec largefile usbhost"
 
 VIRTUAL-RUNTIME_base-utils-syslog ?= "rsyslog"
 IMAGE_ROOTFS_EXTRA_SPACE = "524288"
-EXTRA_IMAGE_FEATURES:remove = "debug-tweaks"
+EXTRA_IMAGE_FEATURES:remove = "allow-empty-password empty-root-password allow-root-login"
 
 DISABLE_ROOT ?= "True"

[meta-security,14/18] harden.conf: exapand debug-tweaks

Commit Message

Patch