mirror of
https://github.com/jiazhang0/meta-secure-core.git
synced 2026-01-12 01:00:15 +00:00
rpm: apply signatures to config files
Since rpm 4.15, the users can control over the installation of signatures on config files through a variable named %_ima_sign_config_files. But this is disabled by default. Add a macro configuration file to enable it. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
This commit is contained in:
@@ -9,3 +9,12 @@ EXTRA_OECONF_remove += "\
|
||||
--disable-plugins \
|
||||
"
|
||||
EXTRA_OECONF_append_class-native = " --disable-inhibit-plugin"
|
||||
|
||||
SRC_URI_append = " \
|
||||
file://macros.ima \
|
||||
"
|
||||
|
||||
do_install_append () {
|
||||
install -d ${D}${sysconfdir}/rpm
|
||||
install -m 0644 ${WORKDIR}/macros.ima ${D}${sysconfdir}/rpm/
|
||||
}
|
||||
|
||||
1
meta-integrity/recipes-devtools/rpm/rpm/macros.ima
Normal file
1
meta-integrity/recipes-devtools/rpm/rpm/macros.ima
Normal file
@@ -0,0 +1 @@
|
||||
%_ima_sign_config_files 1
|
||||
Reference in New Issue
Block a user