linux/meta-security.git/meta-integrity/recipes-security/ima_policy_hashed, branch masterMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=master2024-08-01T01:10:13+00:00ima-policy: Fix S=UNPACKDIR2024-08-01T01:10:13+00:00Armin Kusterakuster808@gmail.com2024-07-29T23:59:28+00:00urn:sha1:03c0e8e03a6ff5633be47e0e2fb8c5021e6f5c96
Drop BP , these are files not src bundle
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-hashed: set S2024-08-01T01:10:13+00:00Mikko Rapelimikko.rapeli@linaro.org2024-07-25T09:01:28+00:00urn:sha1:bcbe3fd60aa5b1d7d711b24b6ea72b5eee15a637
Build with latest poky fails without
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-hashed: Start WORKDIR -> UNPACKDIR transition2024-06-17T12:29:08+00:00Wang Mingyuwangmy@fujitsu.com2024-06-14T18:25:05+00:00urn:sha1:cc775387a1a5fd5057f322c72bb818967627cd45
Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: Convert to new override syntax2021-08-01T15:47:08+00:00Armin Kusterakuster808@gmail.com2021-07-29T23:32:05+00:00urn:sha1:b8554aae23cb66378866bff7d5ef6c6324fa486a
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta: drop IMA_POLICY from policy recipes2021-04-02T15:21:34+00:00Ming Liuliu.ming50@gmail.com2021-03-22T13:02:15+00:00urn:sha1:995f25bcb91357d988d89e940ac1d2f792c18b1a
IMA_POLICY is being referred as policy recipe name in some places and it
is also being referred as policy file in other places, they are
conflicting with each other which make it impossible to set a IMA_POLICY
global variable in config file.
Fix it by dropping IMA_POLICY definitions from policy recipes
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-hashed: add CGROUP2_SUPER_MAGIC fsmagic2021-03-02T19:56:27+00:00Ming Liuliu.ming50@gmail.com2021-03-01T12:35:58+00:00urn:sha1:9504d02694d89302a867f296b73e884c03413fd3
This fixes following systemd boot issues:
[ 7.455580] systemd[1]: Failed to create /init.scope control group: Permission denied
[ 7.457677] systemd[1]: Failed to allocate manager object: Permission denied
[!!!!!!] Failed to allocate manager object.
[ 7.459270] systemd[1]: Freezing execution.
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: fix issues with yocto-check-layer2020-01-04T18:55:26+00:00Armin Kusterakuster808@gmail.com2019-12-22T15:43:00+00:00urn:sha1:5d629ccb542fe8ce523ea0a53d8a505552004302
[v2]
re-did solutions
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-hashed: add new recipe2019-05-28T14:38:52+00:00Armin Kusterakuster808@gmail.com2019-05-21T14:09:44+00:00urn:sha1:c84f39f8e09aabb479f7157765c3e3085c1e1109
Signed-off-by: Armin Kuster <akuster808@gmail.com>