linux/meta-security.git/classes, branch mickledore

dm-verity-img.bbclass: Fix the hash offset alignment issue

2023-03-20T20:27:24+00:00

When using the kernel module parameter "dm-mod.create=" [1] to create the device-mapper device, the hash offset address we passed to kernel module is the hash block number. That means the hash offset address would have to be aligned to the max(data_block_size, hash_block_size), otherwise there would be no way to set the correct hash offset address via "dm-mo.create=". [1] https://www.kernel.org/doc/Documentation/admin-guide/device-mapper/dm-init.rst Signed-off-by: Kevin Hao Signed-off-by: Armin Kuster

dm-verity-img.bbclass: fix syntax warning

2023-03-20T20:27:24+00:00

Fixes warning ``` SyntaxWarning: "is not" with a literal. Did you mean "!="? ``` Signed-off-by: Eero Aaltonen Signed-off-by: Armin Kuster

dm-verity-img.bbclass: add squashfs images

2023-02-11T15:36:23+00:00

Add squashfs to images supported by verity. Signed-off-by: Maciek Borzecki Signed-off-by: Armin Kuster

classes: add aide routines

2022-06-24T01:47:59+00:00

Signed-off-by: Armin Kuster

Add EROFS support to dm-verity-img class

2022-05-01T17:26:52+00:00

[PATCH] Add support for the EROFS image, and it's compressed options, to the dm-verity-img.bbclass setup, theoretically this is a simple addition to the list of types however there is a quirk in how Poky handles the filesystems in poky/meta/classes/image_types.bbclass. Specifically the 'IMAGE_CMD' and 'IMAGE_FSTYPES' use a hyphen, e.g. erofs-lz4, however in the image_type bbclass the task for that would be "do_image_erofs_lz4", replacing the hyphen with an underscore. As the dm-verity-img.bbclass adds a dependency to the wic image creation on the do_image_* task then it fails as there is no "do_image_erofs-lz4", so simply replace the hypen with an underscore. Signed-off-by: Armin Kuster

dm-verity-img.bbclass: Fix wrong override syntax for CONVERSION_DEPENDS

2021-12-25T19:31:45+00:00

CONVERSION_DEPENDS hasn't been converted to the new syntax. Fixes: a23ceef ("dm-verity-img.bbclass: more overided fixups") Signed-off-by: Kristian Klausen Signed-off-by: Armin Kuster

dm-verity-img.bbclass: Expose --data-block-size for configuration

2021-09-06T22:53:00+00:00

Add DM_VERITY_IMAGE_DATA_BLOCK_SIZE to be able to set the --data-block-size used in veritysetup. Tuning this value effects the performance and size of the resulting image. Signed-off-by: Christer Fletcher Signed-off-by: Paulo Neves Signed-off-by: Armin Kuster

meta: Fix typos

2021-08-29T15:59:29+00:00

Fix the variable spelling errors s/SKIP_META_SECUIRTY_SANITY_CHECK/SKIP_META_SECURITY_SANITY_CHECK Signed-off-by: George Liu Acked-by: Martin Jansa Signed-off-by: Armin Kuster

dm-verity-img.bbclass: more overided fixups

2021-08-27T04:45:04+00:00

Signed-off-by: Armin Kuster

meta-security: add sanity check

2021-06-06T20:03:37+00:00

Signed-off-by: Armin Kuster