mirror of
https://git.yoctoproject.org/meta-security
synced 2026-07-16 15:57:21 +00:00
4585f1e8c9
Signed-off-by: Armin Kuster <akuster808@gmail.com>
54 lines
1.5 KiB
BlitzBasic
54 lines
1.5 KiB
BlitzBasic
SUMMARY = "SWTPM - OpenEmbedded wrapper scripts for native swtpm tools"
|
|
LICENSE = "MIT"
|
|
DEPENDS = "swtpm-native tpm-tools-native net-tools-native"
|
|
|
|
inherit native
|
|
|
|
# The whole point of the recipe is to make files available
|
|
# for use after the build is done, so don't clean up...
|
|
RM_WORK_EXCLUDE += "${PN}"
|
|
|
|
do_create_wrapper () {
|
|
# Wrap (almost) all swtpm binaries. Some get special wrappers and some
|
|
# are not needed.
|
|
for i in `find ${bindir} ${base_bindir} ${sbindir} ${base_sbindir} -name 'swtpm*' -perm /+x -type f`; do
|
|
exe=`basename $i`
|
|
case $exe in
|
|
swtpm_setup.sh)
|
|
cat >${WORKDIR}/swtpm_setup_oe.sh <<EOF
|
|
#! /bin/sh
|
|
#
|
|
# Wrapper around swtpm_setup.sh which adds parameters required to
|
|
# run the setup as non-root directly from the native sysroot.
|
|
|
|
PATH="${bindir}:${base_bindir}:${sbindir}:${base_sbindir}:\$PATH"
|
|
export PATH
|
|
|
|
# tcsd only allows to be run as root or tss. Pretend to be root...
|
|
exec env ${FAKEROOTENV} ${FAKEROOTCMD} swtpm_setup.sh --config ${STAGING_DIR_NATIVE}/etc/swtpm_setup.conf "\$@"
|
|
EOF
|
|
;;
|
|
swtpm_setup)
|
|
true
|
|
;;
|
|
*)
|
|
cat >${WORKDIR}/${exe}_oe.sh <<EOF
|
|
#! /bin/sh
|
|
#
|
|
# Wrapper around $exe which makes it easier to invoke
|
|
# the right binary.
|
|
|
|
PATH="${bindir}:${base_bindir}:${sbindir}:${base_sbindir}:\$PATH"
|
|
export PATH
|
|
|
|
exec ${exe} "\$@"
|
|
EOF
|
|
;;
|
|
esac
|
|
done
|
|
|
|
chmod a+rx ${WORKDIR}/*.sh
|
|
}
|
|
|
|
addtask do_create_wrapper before do_build after do_prepare_recipe_sysroot
|