mirrors/meta-secure-core
1
0
Fork 0
mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-27 14:28:45 +00:00
Code Issues Projects Releases Wiki Activity
495 Commits 6 Branches 0 Tags
master
Commit Graph

128 Commits

Author SHA1 Message Date
Lans Zhang 2c265a6fc3 meta-integrity/README.md: update 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-08-15 10:16:41 +08:00
Lans Zhang e8d6e006e7 systemd: fix the conditions of PACKAGECONFIG for ima and cryptsetup 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-08-04 22:03:45 +08:00
Lans Zhang dd9a695df8 systemd: enable ima and cryptsetup 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-08-04 17:01:00 +08:00
Lans Zhang 50bd7859af rpm: remove PACKAGECONFIG[imaevm] 
This setting is already merged to oe-core.

Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-28 10:14:25 +08:00
Lans Zhang f77e53d627 meta-secure-core: code style fixup 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-28 10:09:02 +08:00
Lans Zhang 77640af54c IMA: move the default policy file to /etc/ima directory 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-25 09:37:59 +08:00
Lans Zhang c84c5efb45 IMA: allow to write policy but deny to read policy 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-20 16:14:15 +08:00
Lans Zhang e874405319 meta-secure-core: define the oe index name 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-20 14:17:27 +08:00
Lans Zhang 3eadb6ce1c sign_rpm_ext: remove the test lines 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-19 10:56:47 +08:00
Lans Zhang 9c8ddd5bd3 IMA: enable RPM file signing if ima is configured 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-19 09:56:29 +08:00
Lans Zhang ea2ae90be4 rpm: allow to enable IMA signing 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-18 13:51:07 +08:00
Lans Zhang 676968891f Fix the occurrence of checking the existence of signing keys 
packagegroups are not the end consumers of using user-key-store.

Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-12 11:22:40 +08:00
Lans Zhang a91fbd1776 packagegroup-efi-secure-boot/packagegroup-ima: depend on check_deploy_keys 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-11 14:15:00 +08:00
Lans Zhang 0f3911c740 keyutils: fix build failure with ppc 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-11 14:06:56 +08:00
Lans Zhang fbce2ce14b meta-integrity: enable sign_rpm_ext to support rpm and file signing 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-11 12:58:05 +08:00
Lans Zhang 625c3c6b61 base-file: mount securityfs 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-11 12:47:52 +08:00
Lans Zhang 5d1376b6a0 IMA: clean up IMA signing 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-11 12:47:35 +08:00
Lans Zhang 7c83acd861 Clean up RDEPENDS 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-05 10:52:10 +08:00
Lans Zhang a9e266c481 ima-policy: enable policy check 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-04 17:21:48 +08:00
Lans Zhang b736677f3f initrdscripts-ima: clean up code style and RDEPENDS 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-04 17:20:59 +08:00
Lans Zhang dda0659b71 init.ima: code style cleanup 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-04 17:20:07 +08:00
Lans Zhang 407c56068d Code style fixup 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-04 17:19:42 +08:00
Lans Zhang f0f6b205e8 packagegroup-ima*: clean up the RDEPENDS 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-04 17:17:07 +08:00
Lans Zhang 572b7999c3 meta-integrity: implement the system trusted cert and IMA trusted cert 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-04 10:39:00 +08:00
Lans Zhang 353a003f1b Use the DER-formatted system trusted key 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-03 15:50:59 +08:00
Lans Zhang e664a331d5 code style fixup 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-06-29 10:52:06 +08:00
Lans Zhang 8e01c0a442 IMA: refresh kernel cfg 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-06-26 11:33:39 +08:00
Lans Zhang 1b3e594449 meta-secure-core: initial commit 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-06-22 15:24:04 +08:00