Bug 4208

Summary: Run Bastille Linux or equivalent on target image
Product: [Build System, Metadata & Runtime] Other YP Layers Reporter: Dave Stewart <david.c.stewart>
Component: layersAssignee: Saul Wold <sgw>
Status: VERIFIED DUPLICATE QA Contact:
Severity: enhancement    
Priority: High CC: alexandru.c.georgescu, poky.bs.watcher, poky.watcher
Version: 1.5   
Target Milestone: 1.5   
Hardware: x86   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: ---

Description Dave Stewart 2013-04-05 23:07:11 UTC 
We should adopt a tool like Bastille Linux as part of the build system (perhaps an optional part).

Bastille can be run against a running Linux system to identify common backdoors and security holes.

A recipe probably needs to be developed plus a method for running it as part of the sanity test. Then there should be an easy way for developers using Yocto to run Bastille as a QA pass on their device.

This enhancement should be marked HIGH (P1) for the 1.5 release
Comment 1 Saul Wold 2013-04-08 14:31:04 UTC 
Dup

*** This bug has been marked as a duplicate of bug 3867 ***
Comment 2 Alexandru Georgescu 2013-05-24 12:16:09 UTC 
Verified as per above comment