mirror of
https://git.yoctoproject.org/meta-security
synced 2026-06-02 13:30:33 +00:00
meta-integrity: Convert to new override syntax
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
# Append iversion option for auto types
|
||||
do_install_append() {
|
||||
do_install:append() {
|
||||
sed -i 's/\s*auto\s*defaults/&,iversion/' "${D}${sysconfdir}/fstab"
|
||||
echo 'securityfs /sys/kernel/security securityfs defaults 0 0' >> "${D}${sysconfdir}/fstab"
|
||||
}
|
||||
|
||||
@@ -18,4 +18,4 @@ export IMAGE_BASENAME = "integrity-image-minimal"
|
||||
|
||||
INHERIT += "ima-evm-rootfs"
|
||||
|
||||
QB_KERNEL_CMDLINE_APPEND_append = " ima_appraise=fix ima_policy=tcb ima_policy=appraise_tcb"
|
||||
QB_KERNEL_CMDLINE_APPEND:append = " ima_appraise=fix ima_policy=tcb ima_policy=appraise_tcb"
|
||||
|
||||
@@ -30,7 +30,7 @@ do_install () {
|
||||
sed -i "s/@@FORCE_IMA@@/${IMA_FORCE}/g" ${D}/init.d/20-ima
|
||||
}
|
||||
|
||||
FILES_${PN} = "/init.d ${sysconfdir}"
|
||||
FILES:${PN} = "/init.d ${sysconfdir}"
|
||||
|
||||
RDEPENDS_${PN} = "keyutils ima-evm-keys ${IMA_POLICY}"
|
||||
RDEPENDS_${PN} += "initramfs-framework-base"
|
||||
RDEPENDS:${PN} = "keyutils ima-evm-keys ${IMA_POLICY}"
|
||||
RDEPENDS:${PN} += "initramfs-framework-base"
|
||||
|
||||
@@ -6,6 +6,6 @@ inherit packagegroup features_check
|
||||
REQUIRED_DISTRO_FEATURES = "ima"
|
||||
|
||||
# Only one at the moment, but perhaps more will come in the future.
|
||||
RDEPENDS_${PN} = " \
|
||||
RDEPENDS:${PN} = " \
|
||||
ima-evm-utils \
|
||||
"
|
||||
|
||||
@@ -1,11 +1,11 @@
|
||||
FILESEXTRAPATHS_prepend := "${THISDIR}/files:"
|
||||
FILESEXTRAPATHS:prepend := "${THISDIR}/files:"
|
||||
|
||||
SRC_URI += " \
|
||||
file://machine-id-commit-sync.conf \
|
||||
file://random-seed-sync.conf \
|
||||
"
|
||||
|
||||
do_install_append () {
|
||||
do_install:append () {
|
||||
for i in machine-id-commit random-seed; do
|
||||
install -d ${D}/${systemd_system_unitdir}/systemd-$i.service.d
|
||||
install -m 0644 ${WORKDIR}/$i-sync.conf ${D}/${systemd_system_unitdir}/systemd-$i.service.d
|
||||
|
||||
Reference in New Issue
Block a user