SUMMARY = "A tool for checking the security hardening options of the Linux kernel"
DESCRIPTION = "\
    There are plenty of security hardening options for the Linux kernel; Kconfig \
    options (compile-time); Kernel cmdline arguments (boot-time); Sysctl \
    parameters (runtime). A lot of them have to be enabled manually to make the \
    system more secure which is difficult to track. This tool helps with this \
    task by checking and reporting about the settings compared to a list of \
    recommendation. \
"
HOMEPAGE = "https://github.com/a13xp0p0v/kernel-hardening-checker"
BUGTRACKER = "https://github.com/a13xp0p0v/kernel-hardening-checker/issues"
LICENSE = "GPL-3.0-only"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=d32239bcb673463ab874e80d47fae504"

SRC_URI = "git://github.com/a13xp0p0v/kernel-hardening-checker;protocol=https;branch=master \
	   file://0001-pyproject.toml-fix-up-license-information.patch \
	   file://0002-pyproject.toml-relax-setuptool-version-requirement.patch"

SRCREV = "afc376f2a935994793343cfeb05953583cc30191"

S = "${WORKDIR}/git"

PACKAGE_ARCH = "${MACHINE_ARCH}"

RDEPENDS:${PN} = "\
    python3-json \
    python3-misc \
    python3-compression \
    bash \
"

# /boot/config is required for the analysis
RRECOMMENDS:${PN}:class-target = "\
    kernel-dev \
"

inherit python_setuptools_build_meta

# allow to run on build host, if you don't want it in the image
# oe-run-native kernel-hardening-checker-native kernel-hardening-checker ...
BBCLASSEXTEND = "native"