mirrors/meta-secure-core
1
0
Fork 0
mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-16 20:56:58 +00:00
Code Issues Projects Releases Wiki Activity
281 Commits 6 Branches 0 Tags
rocko
Commit Graph

12 Commits

Author SHA1 Message Date
Jia Zhang f1ac8a4553 ima/linux-yocto: Enable CONFIG_IMA_READ_POLICY and CONFIG_IMA_APPRAISE_BOOTPARAM 
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
 2018-03-19 21:25:15 -04:00
Jia Zhang 73cae2678d integrity/linux-yocto: Enable CONFIG_SYSTEM_BLACKLIST_KEYRING 
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
 2018-03-19 21:24:13 -04:00
Tom Rini 184dc8bb25 meta-integrity: Ensure that we have CONFIG_SECURITY enabled in the kernel 
To make it easier to use this layer with various BSP layers we need to
ensure that we set CONFIG_SECURITY=y as that is in turn required by the
rest of our features, except for CONFIG_SECURITYFS

Signed-off-by: Tom Rini <trini@konsulko.com>
 2018-02-22 09:12:30 +08:00
Jia Zhang a22324542d linux-yocto: fix loading kernel module due to being stripped 
The kernel module will be stripped during do_package, including the
modsign signature.

Use INHIBIT_PACKAGE_STRIP=1 if modsign is configured.

Signed-off-by: Jia Zhang <qianyue.zj@alibaba-inc.com>
 2017-11-26 13:09:01 +08:00
Jia Zhang 59ca43808c meta-integrity: enable modsign support in kernel 
Signed-off-by: Jia Zhang <qianyue.zj@alibaba-inc.com>
 2017-11-21 09:32:12 -05:00
Lans Zhang c84c5efb45 IMA: allow to write policy but deny to read policy 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-20 16:14:15 +08:00
Lans Zhang 407c56068d Code style fixup 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-04 17:19:42 +08:00
Lans Zhang 572b7999c3 meta-integrity: implement the system trusted cert and IMA trusted cert 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-04 10:39:00 +08:00
Lans Zhang 353a003f1b Use the DER-formatted system trusted key 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-07-03 15:50:59 +08:00
Lans Zhang e664a331d5 code style fixup 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-06-29 10:52:06 +08:00
Lans Zhang 8e01c0a442 IMA: refresh kernel cfg 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-06-26 11:33:39 +08:00
Lans Zhang 1b3e594449 meta-secure-core: initial commit 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
 2017-06-22 15:24:04 +08:00