linux/meta-security.git/meta-integrity, branch styheadMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=styhead2024-09-15T15:27:10+00:00layer.conf: Update to styhead release name series2024-09-15T15:27:10+00:00Armin Kusterakuster808@gmail.com2024-09-15T15:27:10+00:00urn:sha1:5e742d7fb09f63c558738dc9ec728dfdc624cec4
few more layers to fixup
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy: Fix S=UNPACKDIR2024-08-01T01:10:13+00:00Armin Kusterakuster808@gmail.com2024-07-29T23:59:28+00:00urn:sha1:03c0e8e03a6ff5633be47e0e2fb8c5021e6f5c96
Drop BP , these are files not src bundle
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-simple: set S2024-08-01T01:10:13+00:00Mikko Rapelimikko.rapeli@linaro.org2024-07-25T09:01:30+00:00urn:sha1:5a7efe2ed8584777ceaea862d7268ba08955a074
Build with latest poky fails without it
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-appraise-all: set S2024-08-01T01:10:13+00:00Mikko Rapelimikko.rapeli@linaro.org2024-07-25T09:01:29+00:00urn:sha1:7fd6a97183056d3f5eacc6a74fdd835359e4f9de
Build with latest poky requires it
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-hashed: set S2024-08-01T01:10:13+00:00Mikko Rapelimikko.rapeli@linaro.org2024-07-25T09:01:28+00:00urn:sha1:bcbe3fd60aa5b1d7d711b24b6ea72b5eee15a637
Build with latest poky fails without
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-simple: UNPACKDIR fix2024-08-01T01:10:13+00:00Mikko Rapelimikko.rapeli@linaro.org2024-07-25T09:01:20+00:00urn:sha1:139d3e64876383f637fc09e21f5b16d9669d8373
New poky uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-policy-appraise-all: UNPACKDIR fix2024-08-01T01:10:13+00:00Mikko Rapelimikko.rapeli@linaro.org2024-07-25T09:01:19+00:00urn:sha1:0edcbd0b82e7ba546ad00435590c225b98c30cb9
New poky uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
initramfs-framework-ima: UNPACKDIR fix2024-08-01T01:10:13+00:00Mikko Rapelimikko.rapeli@linaro.org2024-07-25T09:01:18+00:00urn:sha1:7028cd22669cefd4c328410edfa414310174280e
New poky uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: Enable passing private key password2024-07-01T11:07:58+00:00Stefan Bergerstefanb@linux.ibm.com2024-06-19T14:15:55+00:00urn:sha1:37e5a930d70ccd6f4468606276012c9711103dc4
Allow users to pass the private key password using
IMA_EVM_EVMCTL_KEY_PASSWORD.
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: Add IMA_EVM_PRIVKEY_KEY_OPT to pass options to evmctl2024-07-01T11:07:58+00:00Stefan Bergerstefanb@linux.ibm.com2024-06-19T14:15:54+00:00urn:sha1:06bd46276fbba42019f1327ecd8c4caf6a963a6f
Introduce IMA_EVM_PRIVKEY_KEY_OPT to pass additional options to evmctl
when signing files. An example is --keyid <id> that makes evmctl use
a specific key id when signing files.
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>