meta-secure-core

mirrors/meta-secure-core

Fork 0

mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-16 04:36:58 +00:00

Commit Graph

Select branches

Hide Pull Requests

gatesgarth

honister

master

rocko

sumo

thud

#1

#1

#10

#10

#100

#101

#102

#103

#104

#105

#106

#107

#109

#11

#110

#111

#112

#113

#115

#116

#117

#118

#119

#12

#12

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#156

#157

#158

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#195

#196

#197

#198

#199

#2

#20

#200

#201

#203

#205

#207

#208

#21

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#230

#231

#232

#233

#233

#234

#235

#238

#239

#24

#240

#241

#244

#249

#25

#250

#251

#252

#253

#255

#257

#258

#26

#26

#260

#261

#262

#27

#28

#29

#3

#31

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#45

#46

#46

#47

#48

#5

#50

#51

#52

#53

#54

#55

#56

#58

#59

#60

#62

#63

#64

#65

#66

#67

#68

#69

#7

#7

#70

#71

#72

#74

#75

#76

#77

#78

#8

#8

#80

#81

#82

#83

#84

#85

#87

#88

#89

#9

#90

#91

#92

#93

#96

#97

#99

aa9b435b55 cryptfs-tpm2: sync up with upstream Lans Zhang 2017-08-09 10:53:47 +08:00
03a5d21586 shim: sync up with upstream Lans Zhang 2017-08-09 10:25:25 +08:00
1098d813ed systemd: work around circular dependency chains found if systemd is configured to enable cryptsetup Lans Zhang 2017-08-09 09:52:17 +08:00
e8d6e006e7 systemd: fix the conditions of PACKAGECONFIG for ima and cryptsetup Lans Zhang 2017-08-04 22:03:45 +08:00
dd9a695df8 systemd: enable ima and cryptsetup Lans Zhang 2017-08-04 17:01:00 +08:00
8dd6733e31 cryptsetup: depend on lvm2 to include dmsetup Lans Zhang 2017-08-04 16:36:41 +08:00
7610abb4c8 cryptfs-tpm2: fix RDEPENDS Lans Zhang 2017-08-04 14:43:09 +08:00
909c571a60 meta-encrypted-storage: depend on meta-oe Lans Zhang 2017-08-04 14:42:36 +08:00
59c66fed7a kernel-initramfs: set the default priority to -1 Lans Zhang 2017-08-03 14:38:11 +08:00
1078adea02 shim: sync up with upstream Lans Zhang 2017-08-03 09:56:12 +08:00
a3e1038d71 shim: don't set CSV boot entry as the first boot option Lans Zhang 2017-08-01 13:13:06 +08:00
7f3143523d create-user-key-store.sh: self-sign KEK and DB Lans Zhang 2017-08-01 10:40:59 +08:00
45748a09ef README.md: simplify the commits for boot flow Lans Zhang 2017-07-31 19:28:24 +08:00
50bd7859af rpm: remove PACKAGECONFIG[imaevm] Lans Zhang 2017-07-28 10:14:01 +08:00
f77e53d627 meta-secure-core: code style fixup Lans Zhang 2017-07-28 10:09:02 +08:00
afea92abb3 grub-efi: remove the depreciated replacement for initrd= parameter Lans Zhang 2017-07-28 10:01:20 +08:00
afdac6c3ca grub/boot-menu.inc: use linux and initrd commands instead of chainloader to boot kernel Lans Zhang 2017-07-27 16:19:40 +08:00
71fc35c506 tpm2.0-tss: remove systemd from inherit command Lans Zhang 2017-07-27 13:26:42 +08:00
14cbd4685f packagegroup-encrypted-storage.inc: add cryptfs-tpm2 Lans Zhang 2017-07-27 11:28:32 +08:00
c82c3c56e8 initrdscripts-secure-core: install udevd and udevadm provided by either eudev or udev Lans Zhang 2017-07-26 22:48:05 +08:00
4eaaa557ff initrdscripts-secure-core: don't install sysvinit Lans Zhang 2017-07-26 22:40:48 +08:00
c28ebfb984 user-key-store.bbclass: set SYSTEM_TRUSTED only if ima is configured Lans Zhang 2017-07-25 21:16:40 +08:00
1546eb8538 user-key-store.bbclass: don't run check_deploy_keys in parallel Lans Zhang 2017-07-25 21:15:25 +08:00
77640af54c IMA: move the default policy file to /etc/ima directory Lans Zhang 2017-07-25 09:37:59 +08:00
567e817691 meta-efi-secure-boot/README: update to reflect using fallback to chainloader SELoader Lans Zhang 2017-07-25 09:33:16 +08:00
008b18270f shim: use fallback loading SELoader Lans Zhang 2017-07-24 12:31:26 +08:00
9b96939178 sbsigntool: code style fixup Lans Zhang 2017-07-24 12:21:44 +08:00
c929a3e3fc efivar: clean up Lans Zhang 2017-07-24 12:21:29 +08:00
2531d04180 meta-efi-secure-boot: depend on meta-perl Lans Zhang 2017-07-24 11:51:31 +08:00
189b6e56ab shim: update to the latest Lans Zhang 2017-07-24 09:32:55 +08:00
1212f2c974 openssl-tpm-engine: fix cmdline parsing failure on arm platform Lans Zhang 2017-07-21 17:13:47 +08:00
5726763b02 tpm2simulator: add the native build Lans Zhang 2017-07-21 11:43:53 +08:00
b8ea0f4da9 trouser: a minor fix for debug package Lans Zhang 2017-07-21 11:06:31 +08:00
c84c5efb45 IMA: allow to write policy but deny to read policy Lans Zhang 2017-07-20 16:14:15 +08:00
4d98ee98d2 meta-tpm2: code style fixup Lans Zhang 2017-07-20 16:13:07 +08:00
b2ace92daf tss2.0-tss: don't create tss user account Lans Zhang 2017-07-20 16:11:03 +08:00
17376a2062 tpm2-abrmd: update to the latest and code style fixup Lans Zhang 2017-07-20 16:10:13 +08:00
c53a21104b tpm2.0-tools: clean up .m4 Lans Zhang 2017-07-20 15:54:11 +08:00
9b7c0d98ca tpm2.0-tss: update to the latest and code style fixup Lans Zhang 2017-07-20 15:50:46 +08:00
e8aee2ab91 tpm2.0-tools: update to the latest and code style fixup Lans Zhang 2017-07-20 15:21:04 +08:00
e874405319 meta-secure-core: define the oe index name Lans Zhang 2017-07-20 14:17:27 +08:00
ede9a4f871 tpm-tools: update to the latest and code style fixup Lans Zhang 2017-07-20 13:51:38 +08:00
d5ea27e293 tss-testsuite: update to the latest and code style fixup Lans Zhang 2017-07-20 13:32:44 +08:00
9ee97956a6 tpm-quote-tools: update to the latest and code style fixup Lans Zhang 2017-07-20 13:16:05 +08:00
788b69e11b pcr-extend: update to the latest and code style fixup Lans Zhang 2017-07-20 11:15:00 +08:00
6fd899a866 openssl-tpm-engine: update to the latest and code style fixup Lans Zhang 2017-07-20 10:58:22 +08:00
6f7bf76d94 meta-secure-core: define new image type secure-core-minimal-image Lans Zhang 2017-07-20 10:30:41 +08:00
dffeaacd06 meta-tpm: code style fixup Lans Zhang 2017-07-20 10:30:19 +08:00
a654b0702f cryptfs-tpm2: change the SECTION Lans Zhang 2017-07-20 10:29:04 +08:00
3df0a11acc trousers: update to the latest and code style fixup Lans Zhang 2017-07-20 10:28:20 +08:00
42ac614ecc README: RPM5 signing is not supported Lans Zhang 2017-07-19 14:13:05 +08:00
86a9006cfb README: don't include meta-secure-core as the sub-layer Lans Zhang 2017-07-19 14:05:24 +08:00
dbd94168ce README update Lans Zhang 2017-07-19 10:57:08 +08:00
3eadb6ce1c sign_rpm_ext: remove the test lines Lans Zhang 2017-07-19 10:56:47 +08:00
9c8ddd5bd3 IMA: enable RPM file signing if ima is configured Lans Zhang 2017-07-19 09:56:29 +08:00
ea2ae90be4 rpm: allow to enable IMA signing Lans Zhang 2017-07-18 13:51:07 +08:00
a50e927a87 seloader: sync up with upstream Lans Zhang 2017-07-13 15:54:12 +08:00
f04c4eaf6a Add the missing COPYING.MIT files Lans Zhang 2017-07-13 15:31:14 +08:00
e203bcf9a1 meta-efi-secure-boot/README.md: update Lans Zhang 2017-07-13 14:06:28 +08:00
a93ddfe82d libfile-slurp: code style fixup Lans Zhang 2017-07-13 13:18:10 +08:00
9de8b3cf78 seloader,libsign: fix homepage URLs Lans Zhang 2017-07-13 13:14:47 +08:00
fe026e84a4 cryptfs-tpm2: add author and homepage info Lans Zhang 2017-07-13 13:11:47 +08:00
8dbce3e3a0 efitools: code style fixup Lans Zhang 2017-07-13 13:09:41 +08:00
19ddae93db create-user-key-store.sh: add the support of the creation for RPM signing Lans Zhang 2017-07-13 12:44:15 +08:00
6d7f0155e3 seloader, libsign, cryptfs-tpm2: code style fixup Lans Zhang 2017-07-13 10:27:45 +08:00
3af3588ab2 grub-efi: carry forward mok2verify to grub-2.02 Lans Zhang 2017-07-13 10:26:43 +08:00
c071ce2d07 packagegroup-efi-secure-boot: make sure grub never be installed Lans Zhang 2017-07-12 15:37:09 +08:00
480f1f03a0 grub-efi: rebased to 2.02 Lans Zhang 2017-07-12 15:36:46 +08:00
bd15d9c37b Add .github/CODEOWNERS Lans Zhang 2017-07-12 13:35:52 +08:00
676968891f Fix the occurrence of checking the existence of signing keys Lans Zhang 2017-07-12 11:22:40 +08:00
77d7993c43 key-store-rpm-pubkey: fix installation failure Lans Zhang 2017-07-11 16:34:49 +08:00
a91fbd1776 packagegroup-efi-secure-boot/packagegroup-ima: depend on check_deploy_keys Lans Zhang 2017-07-11 14:14:12 +08:00
c0451db34b README: fix a typo Lans Zhang 2017-07-11 14:13:36 +08:00
473d7cf3fd README: cleanup Lans Zhang 2017-07-11 14:08:45 +08:00
0f3911c740 keyutils: fix build failure with ppc Lans Zhang 2017-07-11 14:06:56 +08:00
6f8d513d62 README: cleanup Lans Zhang 2017-07-11 14:04:26 +08:00
251910fb89 user-key-store: don't call anonymous function Lans Zhang 2017-07-11 14:02:38 +08:00
7c7f7f94a1 mokutil: code style fixup Lans Zhang 2017-07-11 13:54:36 +08:00
24712cbb02 mokutil: add the COMPATIBLE_HOST Lans Zhang 2017-07-11 13:51:41 +08:00
02ae233112 shim: enable http boot support Lans Zhang 2017-07-11 13:49:22 +08:00
7bd761d8bb secure-core-image: install lsb packagegroup Lans Zhang 2017-07-11 13:01:04 +08:00
fbce2ce14b meta-integrity: enable sign_rpm_ext to support rpm and file signing Lans Zhang 2017-07-11 12:58:05 +08:00
6ab1f54732 create-user-key-store.sh: clean up subject and support password protection for private key Lans Zhang 2017-07-11 12:54:40 +08:00
b9f73cac16 initrdscripts-secure-core: add RRECOMMENDS Lans Zhang 2017-07-11 12:50:32 +08:00
1f814daaf1 meta-signing-key: replace the sample keys Lans Zhang 2017-07-11 12:49:05 +08:00
625c3c6b61 base-file: mount securityfs Lans Zhang 2017-07-11 12:47:52 +08:00
5d1376b6a0 IMA: clean up IMA signing Lans Zhang 2017-07-11 12:47:10 +08:00
6882f39224 init: don't need to create /proc /sys and /run Lans Zhang 2017-07-05 10:52:45 +08:00
7c83acd861 Clean up RDEPENDS Lans Zhang 2017-07-05 10:52:10 +08:00
487c89348d cryptfs-tpm2: sync up with upstream Lans Zhang 2017-07-05 09:40:11 +08:00
35fb18863a cryptfs-tpm2: code style fixup Lans Zhang 2017-07-05 09:29:09 +08:00
6ace7c99ba init: clean up Lans Zhang 2017-07-04 17:22:12 +08:00
a9e266c481 ima-policy: enable policy check Lans Zhang 2017-07-04 17:21:48 +08:00
b736677f3f initrdscripts-ima: clean up code style and RDEPENDS Lans Zhang 2017-07-04 17:20:59 +08:00
dda0659b71 init.ima: code style cleanup Lans Zhang 2017-07-04 17:20:07 +08:00
407c56068d Code style fixup Lans Zhang 2017-07-04 17:19:42 +08:00
55492bcc10 initrdscripts-secure-core: clean up RDEPENDS Lans Zhang 2017-07-04 17:17:56 +08:00
f0f6b205e8 packagegroup-ima*: clean up the RDEPENDS Lans Zhang 2017-07-04 17:17:07 +08:00
71da40089f initrdscripts-secure-core: renamed from initramfs-secure-core Lans Zhang 2017-07-04 17:15:30 +08:00
d9b358b374 initramfs-secure-core: clean up /init script Lans Zhang 2017-07-04 12:04:41 +08:00

... 3 4 5 6 7 ...