linux/meta-security.git/classes, branch master-wipMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=master-wip2020-05-15T12:28:21+00:00classes: provide a class for generating dm-verity meta-data images2020-05-15T12:28:21+00:00Bartosz Golaszewskibgolaszewski@baylibre.com2020-04-10T12:41:34+00:00urn:sha1:b329e1650daa860c7dfdbd771ddff611452c382b
This adds a class that allows to generate conversions of ext[234] and
btrfs partitions images with dm-verity hash data appended at the end as
well as a corresponding .env file containing the root hash and data
offset that can be stored in a secure location (e.g. signed fitImage)
or signed and verified at run-time on its own.
The class depends on two variables:
DM_VERITY_IMAGE: defines the name of the main image (normally the
one that is used with the bitbake command to
build the main image)
DM_VERITY_IMAGE_TYPE: defines exactly one type for which to generate
the protected image.
Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-security: Add a new .bbclass for meta-security layer.2013-10-24T01:57:20+00:00mulhernmulhern@yoctoproject.org2013-09-11T13:07:30+00:00urn:sha1:cff02a044c6aef347cff8551b156dbc8a5d403d7
Inheriting the class will cause the check_security function to run on the
ROOTFS image. Currently the check_security function just invokes
buck-security-native on the root filesystem of the image.