Meta-security: Past, Present, and Future
Talkat Open Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 2025 · 2025-12-08..12-10·
summary
meta-security is the Yocto Project security toolbox maintained by two co-maintainers since June 2025 and it now builds under CI with a GitLab runner; master and the long‑term branch are buildable and receive weekly-ish patch updates. Key components are meta-security layer, meta-tpm, meta-integrity and sublayers for meta-hardening; notable tools include dm-verity, IMA/EVM, Parsec, OpenSCAP, Suricata and ClamAV. Runtime tests still fail in places, Kirkstone LTS hits end‑of‑life next April, and planned work focuses on CI fixes, backports and consolidating TPM recipes.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:25Origins and maintainership
- 3:11What is Meta-security
- 8:30Current status and CI
- 11:40Future plans
- 22:59Meta-security in automotive
- 32:10Q&A
related talks
34mYocto Project/OpenEmbedded Meets Security
34mEnforcing Runtime Integrity with Maat
51mSecuring Embedded Linux Systems with TPM 2.0
39mMetasecurity: Beyond Patching Vulnerabilities
11mSubsystem Update: tpm2-Software Update and Highlights
25mSecuring Meta's Production PKI Credentials
52mSurviving in the Wilderness: Integrity Protection and System Update
32mImplementing and Validating Linux Cyber Security Requirements: SEAPATH, a Case Study
