mirror of
https://git.yoctoproject.org/meta-security
synced 2026-07-27 07:27:14 +00:00
meta-integrity: Convert to new override syntax
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
@@ -29,7 +29,7 @@ IMA_EVM_ROOTFS_HASHED ?= ". -depth 0 -false"
|
||||
IMA_EVM_ROOTFS_IVERSION ?= ""
|
||||
|
||||
# Avoid re-generating fstab when ima is enabled.
|
||||
WIC_CREATE_EXTRA_ARGS_append = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', ' --no-fstab-update', '', d)}"
|
||||
WIC_CREATE_EXTRA_ARGS:append = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', ' --no-fstab-update', '', d)}"
|
||||
|
||||
ima_evm_sign_rootfs () {
|
||||
cd ${IMAGE_ROOTFS}
|
||||
|
||||
@@ -15,7 +15,7 @@ MODSIGN_X509 ?= "${MODSIGN_KEY_DIR}/x509_modsign.crt"
|
||||
# If this class is enabled, disable stripping signatures from modules
|
||||
INHIBIT_PACKAGE_STRIP = "1"
|
||||
|
||||
kernel_do_configure_prepend() {
|
||||
kernel_do_configure:prepend() {
|
||||
if [ -f "${MODSIGN_PRIVKEY}" -a -f "${MODSIGN_X509}" ]; then
|
||||
cat "${MODSIGN_PRIVKEY}" "${MODSIGN_X509}" \
|
||||
> "${B}/modsign_key.pem"
|
||||
@@ -24,6 +24,6 @@ kernel_do_configure_prepend() {
|
||||
fi
|
||||
}
|
||||
|
||||
do_shared_workdir_append() {
|
||||
do_shared_workdir:append() {
|
||||
cp modsign_key.pem $kerneldir/
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user