linux/meta-security.git/meta-integrity/recipes-security, branch testMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=test2021-04-02T15:21:34+00:00meta: drop IMA_POLICY from policy recipes2021-04-02T15:21:34+00:00Ming Liuliu.ming50@gmail.com2021-03-22T13:02:15+00:00urn:sha1:995f25bcb91357d988d89e940ac1d2f792c18b1a
IMA_POLICY is being referred as policy recipe name in some places and it
is also being referred as policy file in other places, they are
conflicting with each other which make it impossible to set a IMA_POLICY
global variable in config file.
Fix it by dropping IMA_POLICY definitions from policy recipes
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-keys: add file-checksums to IMA_EVM_X5092021-03-18T15:01:19+00:00Ming Liuliu.ming50@gmail.com2021-03-12T09:53:24+00:00urn:sha1:6ada80aa3e8f426c2a4284fc48a2eaf2688d6411
This ensures when a end user change the IMA_EVM_X509 key file,
ima-evm-keys recipe will be rebuilt.
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-hashed: add CGROUP2_SUPER_MAGIC fsmagic2021-03-02T19:56:27+00:00Ming Liuliu.ming50@gmail.com2021-03-01T12:35:58+00:00urn:sha1:9504d02694d89302a867f296b73e884c03413fd3
This fixes following systemd boot issues:
[ 7.455580] systemd[1]: Failed to create /init.scope control group: Permission denied
[ 7.457677] systemd[1]: Failed to allocate manager object: Permission denied
[!!!!!!] Failed to allocate manager object.
[ 7.459270] systemd[1]: Freezing execution.
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-keys: add recipe2021-02-24T04:34:51+00:00Ming Liuliu.ming50@gmail.com2021-02-20T12:18:17+00:00urn:sha1:f70207e1c19ea9e19de29fb95d24e269784b4070
Create a recipe to package IMA/EMV public keys.
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-utils: set native REQUIRED_DISTRO_FEATURES to empty2021-02-24T04:34:51+00:00Ming Liuliu.ming50@gmail.com2021-02-20T12:18:15+00:00urn:sha1:ca1c2086ad3b241db84b170726efe86f7c500632
'ima' does not have to be in native DISTRO_FEATURES, unset it to avoid
sanity check for ima-evm-utils-native.
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: fix issues with yocto-check-layer2020-01-04T18:55:26+00:00Armin Kusterakuster808@gmail.com2019-12-22T15:43:00+00:00urn:sha1:5d629ccb542fe8ce523ea0a53d8a505552004302
[v2]
re-did solutions
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-utils: bump to release 1.2.12019-08-04T20:13:38+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-31T20:24:51+00:00urn:sha1:c2ddc05c2090d856e849b074d3dffa056a784bb5
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-utils: refresh xattr patch2019-08-04T19:17:25+00:00lumagdbaryshkov@gmail.com2019-07-24T11:23:26+00:00urn:sha1:fc20f45964fd36d6b25909876e306503a64fe0ce
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-utils: bump version2019-08-04T19:17:25+00:00lumagdbaryshkov@gmail.com2019-07-24T11:23:25+00:00urn:sha1:2fa48c800d581d4219bdf7980a1b24854feb737e
Currently selected SRCREV (782224f33cd711050cbf6146a12122cd73f9136b)
comes after 1.1 ima-evm-utils release, so bump PV accordingly.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-utils: update to tip2019-06-26T22:47:47+00:00Armin Kusterakuster808@gmail.com2019-06-20T05:46:04+00:00urn:sha1:f63db8ce1d7da061337cc062865ce39837424fb8
Signed-off-by: Armin Kuster <akuster808@gmail.com>