linux/meta-security.git/meta-integrity, branch wip2Mirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=wip22020-01-04T18:55:26+00:00meta-integrity: fix issues with yocto-check-layer2020-01-04T18:55:26+00:00Armin Kusterakuster808@gmail.com2019-12-22T15:43:00+00:00urn:sha1:5d629ccb542fe8ce523ea0a53d8a505552004302
[v2]
re-did solutions
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-security: add layer index callouts2019-12-07T23:31:34+00:00Armin Kusterakuster808@gmail.com2019-12-06T17:35:48+00:00urn:sha1:72b05edff59fbeed58b1258b7b148b1461f8ca38
Signed-off-by: Armin Kuster <akuster808@gmail.com>
layer.conf: Update for zeus series2019-10-11T14:41:01+00:00Armin Kusterakuster808@gmail.com2019-10-08T22:53:13+00:00urn:sha1:a0dee993cd385bec1f1dbc8508e9b32d1f285598
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Acked-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
initramfs-framework-ima: correct IMA_POLICY name2019-09-07T15:32:50+00:00Armin Kusterakuster808@gmail.com2019-09-01T15:13:18+00:00urn:sha1:225c3bc7d07cbfbcde6eb2d9df166a54f7560a21
it had ima_policy_hashed and did not match the recipe
ima-policy-hashed
found by yocto-check-layer
Signed-off-by: Armin Kuster <akuster808@gmail.com>
integrity-image: IMA_EVM_KEY_DIR has no affect, remove2019-08-25T03:43:55+00:00Armin Kusterakuster808@gmail.com2019-08-12T01:50:19+00:00urn:sha1:563c2af19c1c34bf0370be79f2b07afc25b0bdb7
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-integrity: remove kernel fragments now in cache2019-08-16T03:10:33+00:00Armin Kusterakuster808@gmail.com2019-08-09T20:25:47+00:00urn:sha1:0a32d622c8288b70b4e765ce4f4f0390158d1b67
Signed-off-by: Armin Kuster <akuster808@gmail.com>
layer.conf: switch to keyutils from meta-oe2019-08-07T14:09:50+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-29T10:45:47+00:00urn:sha1:9549b76a9073bf7da9e3183f118c02bf365f8021
As pointer by Martin Jansa, keyutils package is now a part of meta-oe,
so switch to using keyutils from that layer.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
linux: add support for kernel modules signing2019-08-07T14:09:50+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-28T15:31:50+00:00urn:sha1:eebe0ff18a87354f422c693262d43cf42c195316
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
kernel-modsign.bbclass: add support for kernel modules signing2019-08-07T14:09:43+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-28T15:31:49+00:00urn:sha1:79bc2559fef750dda6301e4c3ed891850d3244a1
Add bbclass responsible for handling signing of kernel modules.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
fixup class to avoid including in every configure task
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ima-evm-utils: bump to release 1.2.12019-08-04T20:13:38+00:00Dmitry Eremin-Solenikovdmitry_eremin-solenikov@mentor.com2019-07-31T20:24:51+00:00urn:sha1:c2ddc05c2090d856e849b074d3dffa056a784bb5
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>