user-key-store.bbclass: let MOK_SB be overrided

If efi-secure-boot distro feature is enabled, let the possibility to
enable only the UEFI SecureBoot (through UEFI_SB Bitbake variable)
without MOK_SB variable.

Allow explicitly overriding the MOK_SB Bitbake variable.

Signed-off-by: Sandra Tobajas <sandra.tobajas@savoirfairelinux.com>
This commit is contained in:
Sandra Tobajas
2020-01-14 13:18:22 -05:00
committed by Jia Zhang
parent 44a12b93b1
commit b2eb24569b

View File

@@ -8,7 +8,7 @@ DEPENDS_append_class-target += "\
USER_KEY_SHOW_VERBOSE = "1"
UEFI_SB = '${@bb.utils.contains("DISTRO_FEATURES", "efi-secure-boot", "1", "0", d)}'
MOK_SB = '${@bb.utils.contains("DISTRO_FEATURES", "efi-secure-boot", "1", "0", d)}'
MOK_SB ?= '${@bb.utils.contains("DISTRO_FEATURES", "efi-secure-boot", "1", "0", d)}'
MODSIGN = '${@bb.utils.contains("DISTRO_FEATURES", "modsign", "1", "0", d)}'
IMA = '${@bb.utils.contains("DISTRO_FEATURES", "ima", "1", "0", d)}'
SYSTEM_TRUSTED = '${@"1" if d.getVar("IMA", True) == "1" or d.getVar("MODSIGN", True) == "1" else "0"}'