linux/meta-security.git/meta-integrity, branch kirkstone-nextMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=kirkstone-next2026-01-14T21:32:43+00:00Update maintainers2026-01-14T21:32:43+00:00Scott Murrayscott.murray@konsulko.com2025-06-27T18:46:17+00:00urn:sha1:eca72301e0e78cc5d53777552503380e82d96d84
Add Marta and myself as maintainers for meta-security and the other
embedded layers that Armin had been maintaining. To avoid Armin
getting bugged about individual recipes, set the RECIPE_MAINTAINER
variables to myself.
(backport from master)
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta-integrity: kernel-modsign: prevents splitting out debug symbols2022-07-21T23:50:32+00:00Jose Quaresmaquaresma.jose@gmail.com2022-06-27T12:02:47+00:00urn:sha1:c79262a30bd385f5dbb009ef8704a1a01644528e
Starting with [1] kernel modules symbols is being slipped in OE-core
and this breaks the kernel modules sign, so disable it.
[1] https://git.openembedded.org/openembedded-core/commit/?id=e09a8fa931fe617afc05bd5e00dca5dd3fe386e8
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit c1c80cf0c0f26215fb252242f0d70f8870916734)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-keys: don't use lnr2022-03-12T05:08:22+00:00Armin Kusterakuster808@gmail.com2022-03-06T19:33:42+00:00urn:sha1:ddb27e71d8fa60cb5270b5196534e88fa79896c2
lnr is a script in oe-core that creates relative symlinks, with the same
behaviour as `ln --relative --symlink`. It was added back in 2014[1] as
not all of the supported host distributions at the time shipped
coreutils 8.16, the first release with --relative.
However the oldest coreutils release in the supported distributions is
now 8.22 in CentOS 7, so lnr can be deprecated and users switched to ln.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
layer.conf: Update to use kirkstone2022-02-21T03:39:36+00:00Armin Kusterakuster808@gmail.com2022-02-19T22:02:21+00:00urn:sha1:30a4227e3c5b47005dedb3f89299d933557b9209
Update the layers to use the kirkstone namespace. No compatibility is made
for honister due to the variable renaming.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: drop strongswan bbappends2021-12-27T19:47:51+00:00Armin Kusterakuster808@gmail.com2021-12-27T16:35:24+00:00urn:sha1:d6f8b795a81f417cb4f64facb0990d26819abbdb
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: kernel-modsign: Change weak default value2021-08-27T04:43:35+00:00Daiane Angolinidaiane.angolini@foundries.io2021-08-26T17:14:41+00:00urn:sha1:ab90741aa2de75bf8afc4ce99a4f8f412781024a
Assign a weak default value for MODSIGN_KEY_DIR so the other layers can
set a default value for them as well.
Signed-off-by: Daiane Angolini <daiane.angolini@foundries.io>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
layer.conf: Update to honister2021-08-01T15:47:08+00:00Martin JansaMartin.Jansa@gmail.com2021-07-30T09:25:18+00:00urn:sha1:68be8afc6b3e0e354344237aed4ccb749ff45973
This marks the layers as compatible with honister now they use the new override
syntax.
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
meta-integrity: Convert to new override syntax2021-08-01T15:47:08+00:00Armin Kusterakuster808@gmail.com2021-07-29T23:32:05+00:00urn:sha1:b8554aae23cb66378866bff7d5ef6c6324fa486a
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity/recipe-kernel: use sanity check2021-06-06T20:03:37+00:00Armin Kusterakuster808@gmail.com2021-06-02T01:59:51+00:00urn:sha1:48c7b34ec3932ac522a93e631ab9d9e805142af1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: add sanity check2021-06-06T20:03:37+00:00Armin Kusterakuster808@gmail.com2021-06-02T01:59:22+00:00urn:sha1:6e75e751ff1a0e1c45545a032a598a9098fa75f2
Signed-off-by: Armin Kuster <akuster808@gmail.com>