mirror of
https://git.yoctoproject.org/meta-security
synced 2026-07-16 03:47:21 +00:00
Dmitry Eremin-Solenikov
c9c4e6c228
data/debug-keys will be reused for demo modsign keys, so rename IMA_EVM_BASE to more generic INTEGRITY_BASE. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
23 lines
484 B
BlitzBasic
23 lines
484 B
BlitzBasic
DESCRIPTION = "An image as an exmaple for Ima support"
|
|
|
|
IMAGE_FEATURES += "ssh-server-openssh"
|
|
|
|
|
|
IMAGE_INSTALL = "\
|
|
packagegroup-base \
|
|
packagegroup-core-boot \
|
|
packagegroup-ima-evm-utils \
|
|
os-release"
|
|
|
|
|
|
LICENSE = "MIT"
|
|
|
|
inherit core-image
|
|
|
|
export IMAGE_BASENAME = "integrity-image-minimal"
|
|
|
|
INHERIT += "ima-evm-rootfs"
|
|
IMA_EVM_KEY_DIR = "${INTEGRITY_BASE}/data/debug-keys"
|
|
|
|
QB_KERNEL_CMDLINE_APPEND_append = " ima_appraise=fix ima_policy=tcb ima_policy=appraise_tcb"
|