linux/meta-security.git, branch wip_kernelMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=wip_kernel2019-08-09T20:25:47+00:00ima: remove kernel fragments now in cache2019-08-09T20:25:47+00:00Armin Kusterakuster808@gmail.com2019-08-09T20:25:47+00:00urn:sha1:29562326f53f6a01a5099f3360371fa3f1dc3c97
Signed-off-by: Armin Kuster <akuster808@gmail.com>
linux-stable/5.2: add stable bbappend2019-08-09T15:58:50+00:00Armin Kusterakuster808@gmail.com2019-08-09T15:58:50+00:00urn:sha1:ddf38730930679a0e977b8e41de1513a51fb5990
Signed-off-by: Armin Kuster <akuster808@gmail.com>
linux-%: remove kernel fragments now in cache2019-08-09T15:57:56+00:00Armin Kusterakuster808@gmail.com2019-08-09T15:57:56+00:00urn:sha1:0ed3d10c70b68913958b86257b957814c9c91e90
Signed-off-by: Armin Kuster <akuster808@gmail.com>
layer.conf: switch to keyutils from meta-oe2019-08-07T14:09:50+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-29T10:45:47+00:00urn:sha1:9549b76a9073bf7da9e3183f118c02bf365f8021
As pointer by Martin Jansa, keyutils package is now a part of meta-oe,
so switch to using keyutils from that layer.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
scap-security-guide: fix typo2019-08-07T14:09:50+00:00Yi Zhaoyi.zhao@windriver.com2019-08-05T03:20:01+00:00urn:sha1:531f6c1a4d12607305b2709868d014792924cd74
Fix typo: RDEPNEDS_${PN} -> RDEPENDS_${PN}
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
openscap: cleanup DEPENDS2019-08-07T14:09:50+00:00Yi Zhaoyi.zhao@windriver.com2019-08-05T03:20:00+00:00urn:sha1:daf92c57fa1fd87053a0bfc773bb6e6aea605351
Remove autoconf-archive from DEPENDS because it is using CMake/Ninjia
build now. Also remove unused dpkg-native dependency from
DEPENDS_class-native.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
linux: add support for kernel modules signing2019-08-07T14:09:50+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-28T15:31:50+00:00urn:sha1:eebe0ff18a87354f422c693262d43cf42c195316
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
kernel-modsign.bbclass: add support for kernel modules signing2019-08-07T14:09:43+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-28T15:31:49+00:00urn:sha1:79bc2559fef750dda6301e4c3ed891850d3244a1
Add bbclass responsible for handling signing of kernel modules.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
fixup class to avoid including in every configure task
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-utils: bump to release 1.2.12019-08-04T20:13:38+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-31T20:24:51+00:00urn:sha1:c2ddc05c2090d856e849b074d3dffa056a784bb5
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: rename IMA_EVM_BASE to INTEGRITY_BASE2019-08-04T20:12:41+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-28T15:31:48+00:00urn:sha1:c9c4e6c228556cc2054a4b49f85b282fd69fc25c
data/debug-keys will be reused for demo modsign keys, so rename
IMA_EVM_BASE to more generic INTEGRITY_BASE.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>