linux/meta-security.git/meta-integrity/recipes-core/initrdscripts, branch master-next

initramfs-framework-ima: UNPACKDIR fix

2024-08-01T01:10:13+00:00

New poky uses UNPACKDIR instead of WORKDIR Signed-off-by: Mikko Rapeli Signed-off-by: Armin Kuster

meta-integrity: Convert to new override syntax

2021-08-01T15:47:08+00:00

Signed-off-by: Armin Kuster

initramfs-framework-ima: introduce IMA_FORCE

2021-04-12T14:07:11+00:00

Introduce IMA_FORCE to allow the IMA policy be applied forcely even 'no_ima' boot parameter is available. This ensures the end users have a way to disable 'no_ima' support if they want to, because it may expose a security risk if an attacker can find a way to change kernel arguments, it will easily bypass rootfs authenticity checks. Signed-off-by: Sergio Prado Signed-off-by: Ming Liu Signed-off-by: Armin Kuster

initramfs-framework-ima: let ima_enabled return 0

2021-02-24T04:34:51+00:00

Otherwise, ima script would not run as intended. Signed-off-by: Ming Liu Signed-off-by: Armin Kuster

initramfs-framework-ima: RDEPENDS on ima-evm-keys

2021-02-24T04:34:51+00:00

Signed-off-by: Ming Liu Signed-off-by: Armin Kuster

initramfs-framework-ima: fix a wrong path

2021-02-24T04:34:51+00:00

/etc/ima-policy > /etc/ima/ima-policy. Signed-off-by: Ming Liu Signed-off-by: Armin Kuster

meta-integrity: fix issues with yocto-check-layer

2020-01-04T18:55:26+00:00

[v2] re-did solutions Signed-off-by: Armin Kuster

initramfs-framework-ima: correct IMA_POLICY name

2019-09-07T15:32:50+00:00

it had ima_policy_hashed and did not match the recipe ima-policy-hashed found by yocto-check-layer Signed-off-by: Armin Kuster

initramfs: clean up to pull in packages.

2019-05-28T14:38:52+00:00

Signed-off-by: Armin Kuster

meta-integrity: port over from meta-intel-iot-security

2019-05-28T14:38:41+00:00

Signed-off-by: Armin Kuster