mirror of
https://github.com/jiazhang0/meta-secure-core.git
synced 2026-05-08 18:49:28 +00:00
IMA: enable RPM file signing if ima is configured
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
This commit is contained in:
@@ -8,7 +8,7 @@ RPM_GPG_BACKEND ?= "local"
|
|||||||
# SHA-256 is used for the file checksum digest.
|
# SHA-256 is used for the file checksum digest.
|
||||||
RPM_FILE_CHECKSUM_DIGEST ?= "8"
|
RPM_FILE_CHECKSUM_DIGEST ?= "8"
|
||||||
|
|
||||||
RPM_SIGN_FILES = "1"
|
RPM_SIGN_FILES = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', '1', '0', d)}"
|
||||||
RPM_FSK_PATH ?= "${@uks_ima_keys_dir(d) + 'x509_ima.key'}"
|
RPM_FSK_PATH ?= "${@uks_ima_keys_dir(d) + 'x509_ima.key'}"
|
||||||
RPM_FSK_PASSWORD ?= "password"
|
RPM_FSK_PASSWORD ?= "password"
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user