francis.wang
4c86c082a2
Combine poky (Yocto scarthgap), meta-openembedded (scarthgap), and meta-openwrt into a single repository. Components: - poky/ Yocto core framework (BitBake + OE-Core) - meta-openembedded/ Community layers (meta-oe, meta-python, meta-networking) - meta-openwrt/ OpenWrt customization layer - setup-env.sh One-click build environment setup - README.md Project documentation
42 lines
1.5 KiB
BlitzBasic
42 lines
1.5 KiB
BlitzBasic
SUMMARY = "A tool for checking the security hardening options of the Linux kernel"
|
|
DESCRIPTION = "\
|
|
There are plenty of security hardening options for the Linux kernel; Kconfig \
|
|
options (compile-time); Kernel cmdline arguments (boot-time); Sysctl \
|
|
parameters (runtime). A lot of them have to be enabled manually to make the \
|
|
system more secure which is difficult to track. This tool helps with this \
|
|
task by checking and reporting about the settings compared to a list of \
|
|
recommendation. \
|
|
"
|
|
HOMEPAGE = "https://github.com/a13xp0p0v/kernel-hardening-checker"
|
|
BUGTRACKER = "https://github.com/a13xp0p0v/kernel-hardening-checker/issues"
|
|
LICENSE = "GPL-3.0-only"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=d32239bcb673463ab874e80d47fae504"
|
|
|
|
SRC_URI = "git://github.com/a13xp0p0v/kernel-hardening-checker;protocol=https;branch=master \
|
|
file://0001-pyproject.toml-fix-up-license-information.patch \
|
|
file://0002-pyproject.toml-relax-setuptool-version-requirement.patch"
|
|
|
|
SRCREV = "afc376f2a935994793343cfeb05953583cc30191"
|
|
|
|
S = "${WORKDIR}/git"
|
|
|
|
PACKAGE_ARCH = "${MACHINE_ARCH}"
|
|
|
|
RDEPENDS:${PN} = "\
|
|
python3-json \
|
|
python3-misc \
|
|
python3-compression \
|
|
bash \
|
|
"
|
|
|
|
# /boot/config is required for the analysis
|
|
RRECOMMENDS:${PN}:class-target = "\
|
|
kernel-dev \
|
|
"
|
|
|
|
inherit python_setuptools_build_meta
|
|
|
|
# allow to run on build host, if you don't want it in the image
|
|
# oe-run-native kernel-hardening-checker-native kernel-hardening-checker ...
|
|
BBCLASSEXTEND = "native"
|