summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--meta-integrity/recipes-devtools/rpm/rpm-integrity.inc22
-rw-r--r--meta-integrity/recipes-devtools/rpm/rpm_%.bbappend23
2 files changed, 23 insertions, 22 deletions
diff --git a/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc b/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc
new file mode 100644
index 0000000..53fcbdb
--- /dev/null
+++ b/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc
@@ -0,0 +1,22 @@
1FILESEXTRAPATHS_prepend := "${THISDIR}/rpm:"
2
3SRC_URI += "\
4 file://0001-Pass-sign-arguments-to-signature-deletion-too.patch \
5 file://0002-Beat-some-sense-into-rpmsign-cli-parsing.patch \
6 file://0003-Fix-thinko-typo-in-file-signing-error-message.patch \
7 file://0004-Bury-get_fskpass-inside-rpmsign-utility.patch \
8 file://0005-Dont-advertise-file-signing-features-if-support-not-.patch \
9 file://0006-Remove-bunch-of-redundant-environ-declarations.patch \
10 file://0007-Dont-push-NULL-bodied-macros-in-case-of-get_fskpass-.patch \
11 file://0008-Move-key-password-helper-variables-to-local-scope.patch \
12 file://0009-Use-rpm-memory-allocator-so-we-dont-need-to-check-fo.patch \
13 file://0010-Fix-a-number-of-problems-in-get_fskpass.patch \
14 file://0011-Bump-file-digests-to-SHA256-by-default-finally.patch \
15"
16
17PACKAGECONFIG = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'imaevm', '', d)}"
18
19IMA signing support is provided by RPM plugin.
20EXTRA_OECONF_remove += "\
21 --disable-plugins \
22"
diff --git a/meta-integrity/recipes-devtools/rpm/rpm_%.bbappend b/meta-integrity/recipes-devtools/rpm/rpm_%.bbappend
index aeb7c07..d71ca78 100644
--- a/meta-integrity/recipes-devtools/rpm/rpm_%.bbappend
+++ b/meta-integrity/recipes-devtools/rpm/rpm_%.bbappend
@@ -1,22 +1 @@
1FILESEXTRAPATHS_prepend := "${THISDIR}/rpm:" require ${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'rpm-integrity.inc', '', d)}
2
3SRC_URI += "\
4 file://0001-Pass-sign-arguments-to-signature-deletion-too.patch \
5 file://0002-Beat-some-sense-into-rpmsign-cli-parsing.patch \
6 file://0003-Fix-thinko-typo-in-file-signing-error-message.patch \
7 file://0004-Bury-get_fskpass-inside-rpmsign-utility.patch \
8 file://0005-Dont-advertise-file-signing-features-if-support-not-.patch \
9 file://0006-Remove-bunch-of-redundant-environ-declarations.patch \
10 file://0007-Dont-push-NULL-bodied-macros-in-case-of-get_fskpass-.patch \
11 file://0008-Move-key-password-helper-variables-to-local-scope.patch \
12 file://0009-Use-rpm-memory-allocator-so-we-dont-need-to-check-fo.patch \
13 file://0010-Fix-a-number-of-problems-in-get_fskpass.patch \
14 file://0011-Bump-file-digests-to-SHA256-by-default-finally.patch \
15"
16
17PACKAGECONFIG = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'imaevm', '', d)}"
18
19# IMA signing support is provided by RPM plugin.
20EXTRA_OECONF_remove += "\
21 --disable-plugins \
22"