mirrors/meta-secure-core
1
0
Fork 0
mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-16 20:56:58 +00:00
Code Issues Projects Releases Wiki Activity

meta-integrity: enable modsign support in kernel

Browse Source 
Signed-off-by: Jia Zhang <qianyue.zj@alibaba-inc.com>
This commit is contained in:
Jia Zhang
2017-11-21 09:32:12 -05:00
parent bd0f4cbe40
commit 59ca43808c
3 changed files with 30 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-integrity/recipes-kernel/linux/linux-yocto/modsign.cfg
+7
View File
@@ -0,0 +1,7 @@
CONFIG_MODULE_SIG=y
CONFIG_MODULE_SIG_FORCE=y
CONFIG_MODULE_SIG_KEY="modsign_key.pem"
CONFIG_MODULE_SIG_HASH="sha256"
CONFIG_MODULE_SIG_SHA256=y
CONFIG_CRYPTO_SHA256=y
CONFIG_MODULE_SIG_ALL=y
meta-integrity/recipes-kernel/linux/linux-yocto/modsign.scc
+5
View File
@@ -0,0 +1,5 @@
define KFEATURE_DESCRIPTION "Kernel Module Signing (modsign) enablement"
define KFEATURE_COMPATIBILITY all
include integrity.scc
kconf non-hardware modsign.cfg