diff options
| -rw-r--r-- | meta-integrity/README.md | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/meta-integrity/README.md b/meta-integrity/README.md index 4607948..5048fba 100644 --- a/meta-integrity/README.md +++ b/meta-integrity/README.md | |||
| @@ -73,8 +73,10 @@ Adding the layer only enables IMA (see below regarding EVM) during | |||
| 73 | compilation of the Linux kernel. To also activate it when building | 73 | compilation of the Linux kernel. To also activate it when building |
| 74 | the image, enable image signing in the local.conf like this: | 74 | the image, enable image signing in the local.conf like this: |
| 75 | 75 | ||
| 76 | INHERIT += "ima-evm-rootfs" | 76 | IMAGE_CLASSES += "ima-evm-rootfs" |
| 77 | IMA_EVM_KEY_DIR = "${INTEGRITY_BASE}/data/debug-keys" | 77 | IMA_EVM_KEY_DIR = "${INTEGRITY_BASE}/data/debug-keys" |
| 78 | IMA_EVM_PRIVKEY = "${IMA_EVM_KEY_DIR}/privkey_ima.pem" | ||
| 79 | IMA_EVM_X509 = "${IMA_EVM_KEY_DIR}/x509_ima.der" | ||
| 78 | 80 | ||
| 79 | This uses the default keys provided in the "data" directory of the layer. | 81 | This uses the default keys provided in the "data" directory of the layer. |
| 80 | Because everyone has access to these private keys, such an image | 82 | Because everyone has access to these private keys, such an image |