summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorYi Zhao <yi.zhao@windriver.com>2021-11-18 10:15:38 +0800
committerJia Zhang <zhang.jia@linux.alibaba.com>2021-11-18 13:58:20 +0800
commit2bd48852e24bace7737c381883b0086f3370e57f (patch)
treeddd5d5b982629e13b74af67f012363b9591394ff
parentfea6a37625a88993a7937736813417c1968cc9b1 (diff)
downloadmeta-secure-core-2bd48852e24bace7737c381883b0086f3370e57f.tar.gz
meta-secure-core: fix wrong operator combination
Operations like XXX:append += "YYY" are almost always wrong and this is a common mistake made in the metadata. Improve them to use the standard format. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
-rw-r--r--meta-efi-secure-boot/recipes-base/packagegroups/packagegroup-efi-secure-boot.bb2
-rw-r--r--meta-integrity/conf/layer.conf2
-rw-r--r--meta-integrity/recipes-core/util-linux/util-linux-integrity.inc2
-rw-r--r--meta-integrity/recipes-devtools/rpm/rpm-integrity.inc2
-rw-r--r--meta-signing-key/conf/layer.conf2
-rw-r--r--meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb2
6 files changed, 6 insertions, 6 deletions
diff --git a/meta-efi-secure-boot/recipes-base/packagegroups/packagegroup-efi-secure-boot.bb b/meta-efi-secure-boot/recipes-base/packagegroups/packagegroup-efi-secure-boot.bb
index 61afc93..90633f3 100644
--- a/meta-efi-secure-boot/recipes-base/packagegroups/packagegroup-efi-secure-boot.bb
+++ b/meta-efi-secure-boot/recipes-base/packagegroups/packagegroup-efi-secure-boot.bb
@@ -29,4 +29,4 @@ kmods = "\
29RRECOMMENDS:${PN}:x86 += "${kmods}" 29RRECOMMENDS:${PN}:x86 += "${kmods}"
30RRECOMMENDS:${PN}:x86-64 += "${kmods}" 30RRECOMMENDS:${PN}:x86-64 += "${kmods}"
31 31
32IMAGE_INSTALL:remove += "grub" 32IMAGE_INSTALL:remove = "grub"
diff --git a/meta-integrity/conf/layer.conf b/meta-integrity/conf/layer.conf
index 8be64f6..64a950d 100644
--- a/meta-integrity/conf/layer.conf
+++ b/meta-integrity/conf/layer.conf
@@ -24,7 +24,7 @@ LAYERRECOMMENDS_integrity = "\
24 tpm \ 24 tpm \
25" 25"
26 26
27BB_HASHBASE_WHITELIST:append += "\ 27BB_HASHBASE_WHITELIST:append = " \
28 RPM_FSK_PATH \ 28 RPM_FSK_PATH \
29" 29"
30 30
diff --git a/meta-integrity/recipes-core/util-linux/util-linux-integrity.inc b/meta-integrity/recipes-core/util-linux/util-linux-integrity.inc
index 59cca65..68b09ce 100644
--- a/meta-integrity/recipes-core/util-linux/util-linux-integrity.inc
+++ b/meta-integrity/recipes-core/util-linux/util-linux-integrity.inc
@@ -1,4 +1,4 @@
1CFLAGS:remove += "-pie -fpie" 1CFLAGS:remove = "-pie -fpie"
2 2
3# We need -no-pie in case the default is to generate pie code. 3# We need -no-pie in case the default is to generate pie code.
4# 4#
diff --git a/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc b/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc
index b34a2fe..20d4103 100644
--- a/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc
+++ b/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc
@@ -5,7 +5,7 @@ PACKAGECONFIG:append = " \
5 " 5 "
6 6
7# IMA signing support is provided by RPM plugin. 7# IMA signing support is provided by RPM plugin.
8EXTRA_OECONF:remove += "\ 8EXTRA_OECONF:remove = "\
9 --disable-plugins \ 9 --disable-plugins \
10" 10"
11EXTRA_OECONF:append:class-native = " --disable-inhibit-plugin --with-audit=no" 11EXTRA_OECONF:append:class-native = " --disable-inhibit-plugin --with-audit=no"
diff --git a/meta-signing-key/conf/layer.conf b/meta-signing-key/conf/layer.conf
index 77507b2..331fb19 100644
--- a/meta-signing-key/conf/layer.conf
+++ b/meta-signing-key/conf/layer.conf
@@ -64,7 +64,7 @@ RPM_GPG_PASSPHRASE ??= "SecureCore"
64BOOT_GPG_NAME ??= "SecureBootCore" 64BOOT_GPG_NAME ??= "SecureBootCore"
65BOOT_GPG_PASSPHRASE ??= "SecureCore" 65BOOT_GPG_PASSPHRASE ??= "SecureCore"
66 66
67BB_HASHBASE_WHITELIST:append += "\ 67BB_HASHBASE_WHITELIST:append = " \
68 SYSTEM_TRUSTED_KEYS_DIR \ 68 SYSTEM_TRUSTED_KEYS_DIR \
69 SECONDARY_TRUSTED_KEYS_DIR \ 69 SECONDARY_TRUSTED_KEYS_DIR \
70 MODSIGN_KEYS_DIR \ 70 MODSIGN_KEYS_DIR \
diff --git a/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb b/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb
index de605d4..46a0167 100644
--- a/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb
+++ b/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb
@@ -41,7 +41,7 @@ def efi_arch(d):
41# Avoids build breaks when using no-static-libs.inc 41# Avoids build breaks when using no-static-libs.inc
42#DISABLE_STATIC:class-target = "" 42#DISABLE_STATIC:class-target = ""
43 43
44#EXTRA_OECONF:remove:class-target += "\ 44#EXTRA_OECONF:remove:class-target = "\
45# --with-libtool-sysroot \ 45# --with-libtool-sysroot \
46#" 46#"
47 47