mirror of
https://github.com/jiazhang0/meta-secure-core.git
synced 2026-05-30 21:59:43 +00:00
@@ -38,19 +38,16 @@ The vital definitions include:
|
|||||||
Prohibit using the sample keys for signing the images.
|
Prohibit using the sample keys for signing the images.
|
||||||
|
|
||||||
- `UEFI_SB_KEYS_DIR := "<path>"`
|
- `UEFI_SB_KEYS_DIR := "<path>"`
|
||||||
Point to the location of user keys used for UEFI secure boot. If not defined,
|
Point to the location of user keys used for UEFI secure boot.
|
||||||
the user keys for UEFI secure boot will be automatically generated.
|
|
||||||
|
|
||||||
- `MOK_SB_KEYS_DIR := "<path>"`
|
- `MOK_SB_KEYS_DIR := "<path>"`
|
||||||
Point to the location of user keys used for MOK secure boot. Note that
|
Point to the location of user keys used for MOK secure boot. Note that
|
||||||
MOK secure boot is on top of UEFI secure boot so creating the user keys
|
MOK secure boot is on top of UEFI secure boot so creating the user keys
|
||||||
for MOK secure boot only will still introduce the security risk in your
|
for MOK secure boot only will still introduce the security risk in your
|
||||||
product. If not defined, the user keys for MOK secure boot will be
|
product.
|
||||||
automatically generated.
|
|
||||||
|
|
||||||
- `IMA_KEYS_DIR := "<path>"`
|
- `IMA_KEYS_DIR := "<path>"`
|
||||||
Point to the location of user keys used for IMA appraisal. If not defined,
|
Point to the location of user keys used for IMA appraisal.
|
||||||
the user keys for IMA appraisal will be automatically generated.
|
|
||||||
|
|
||||||
- `USER_KEY_SHOW_VERBOSE = "1"`
|
- `USER_KEY_SHOW_VERBOSE = "1"`
|
||||||
Optional. Used to enable the verbose output for debugging purpose.
|
Optional. Used to enable the verbose output for debugging purpose.
|
||||||
@@ -70,4 +67,3 @@ For the details about UEFI secure boot and MOK secure boot, please refer
|
|||||||
to meta-efi-secure-boot/README.md.
|
to meta-efi-secure-boot/README.md.
|
||||||
|
|
||||||
### Reference
|
### Reference
|
||||||
[meta-efi-secure-boot](https://github.com/jiazhang0/meta-efi-secure-boot)
|
|
||||||
|
|||||||
Reference in New Issue
Block a user