linux/meta-security.git/recipes-core, branch master-wipMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=master-wip2020-07-28T05:22:17+00:00packagegroup-core-security: restore riscv64 for libssecomp2020-07-28T05:22:17+00:00Armin Kusterakuster808@gmail.com2020-07-25T18:39:21+00:00urn:sha1:fcceba2208fa7cf63d5841a6a1a3ff743b4cb35d
Signed-off-by: Armin Kuster <akuster808@gmail.com>
packagegroup-core-security: remove libseccomp for riscv*2020-07-28T05:22:17+00:00Armin Kusterakuster808@gmail.com2020-07-25T14:41:18+00:00urn:sha1:29f47b44852122c5618e30037710dde009146eb5
Signed-off-by: Armin Kuster <akuster808@gmail.com>
packagegroup-core-security: remove clamav for riscv*2020-07-25T16:00:39+00:00Armin Kusterakuster808@gmail.com2020-07-24T18:16:50+00:00urn:sha1:98ff502d4096331e2b8a8e4044860b23bf6f8ea5
Signed-off-by: Armin Kuster <akuster808@gmail.com>
security packagegroups: move to recipes-core2020-07-25T16:00:39+00:00Armin Kusterakuster808@gmail.com2020-07-24T18:12:10+00:00urn:sha1:5af1689eae9e857a40cb92793fa6355a9d82c520
Signed-off-by: Armin Kuster <akuster808@gmail.com>
security images: Move to recipe-core2020-07-25T16:00:39+00:00Armin Kusterakuster808@gmail.com2020-07-24T18:11:24+00:00urn:sha1:5392cb9baaf7bb0e3fd530c79ec44757bbde5569
Signed-off-by: Armin Kuster <akuster808@gmail.com>
dm-verity: add a working example for BeagleBone Black2020-05-15T12:28:21+00:00Bartosz Golaszewskibgolaszewski@baylibre.com2020-04-10T12:41:35+00:00urn:sha1:d6369c9aafc433b08f9bb000142b274738be3fb3
This adds various bits and pieces to enable generating a working example
of a full chain of trust up to dm-verity-protected rootfs level on Beagle
Bone Black.
The new initramfs is quite generic and should work for other SoCs as well
when using fitImage.
The following config can be used with current master poky,
meta-openembedded & meta-security to generate a BBB image using verified
boot and dm-verity.
UBOOT_SIGN_KEYDIR = "/tmp/test-keys/"
UBOOT_SIGN_KEYNAME = "dev"
UBOOT_SIGN_ENABLE = "1"
UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb -p 2000"
UBOOT_MACHINE_beaglebone-yocto = "am335x_boneblack_vboot_config"
IMAGE_CLASSES += "dm-verity-img"
IMAGE_FSTYPES += "wic.xz ext4"
DM_VERITY_IMAGE = "core-image-full-cmdline"
DM_VERITY_IMAGE_TYPE = "ext4"
KERNEL_CLASSES += "kernel-fitimage"
KERNEL_IMAGETYPE_beaglebone-yocto = "fitImage"
IMAGE_INSTALL_remove = " kernel-image-zimage"
IMAGE_BOOT_FILES_remove = " zImage"
IMAGE_BOOT_FILES_append = " fitImage-${INITRAMFS_IMAGE}-${MACHINE}-${MACHINE};fitImage"
# Using systemd is not strictly needed but deals nicely with read-only
# filesystem by default.
DISTRO_FEATURES_append = " systemd"
DISTRO_FEATURES_BACKFILL_CONSIDERED += "sysvinit"
VIRTUAL-RUNTIME_init_manager = "systemd"
VIRTUAL-RUNTIME_initscripts = "systemd-compat-units"
INITRAMFS_IMAGE = "dm-verity-image-initramfs"
INITRAMFS_FSTYPES = "cpio.gz"
INITRAMFS_IMAGE_BUNDLE = "1"
WKS_FILE = "beaglebone-yocto-verity.wks.in"
KERNEL_FEATURES_append = " features/device-mapper/dm-verity.scc"
Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
busybox: fix sig changes when layer added2019-09-07T15:32:50+00:00Armin Kusterakuster808@gmail.com2019-08-31T02:35:03+00:00urn:sha1:1b4554dfd7945d8c168c6c1815e9969d89176e02
Signed-off-by: Armin Kuster <akuster808@gmail.com>
libseccomp: add tests2015-04-16T00:54:40+00:00Armin Kusterakuster808@gmail.com2015-04-11T02:09:44+00:00urn:sha1:58096a9c97c8897d937a73be38316df30791b8bf
update busybox for extend head option for test suite
remove seq -f option as it is not supported buy busybox
Signed-off-by: Armin Kuster <akuster808@gmail.com>