Signed-off-by: Armin Kuster <akuster808@...> --- .../ima_policy_simple/files/ima_policy_simple | 4 ++++ .../ima_policy_simple/ima-policy-simple_1.0.bb | 18 ++++++++++++++++++ 2 files

Signed-off-by: Armin Kuster <akuster808@...> --- .../ima_policy_hashed/files/ima_policy_hashed | 77 +++++++++++++++++++ .../ima-policy-hashed_1.0.bb | 20 +++++ 2 files

Signed-off-by: Armin Kuster <akuster808@...> --- meta-integrity/recipes-core/base-files/base-files-ima.inc | 5 +++++ meta-integrity/recipes-core/base-files/base-files_%.bbappend | 1 + 2

remove untested code Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-kernel/linux/linux-%.bbappend | 117 +----------------- 1 file changed, 2 insertions(+), 115

Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-kernel/linux/linux/ima.cfg | 28 ++++++++++--------- .../linux/linux/ima_evm_root_ca.cfg | 6 ++-- 2 files

update to tip backported patches to fix build issues. fix native support Signed-off-by: Armin Kuster <akuster808@...> --- .../ima-evm-utils/ima-evm-utils.inc | 19 ------

Signed-off-by: Armin Kuster <akuster808@...> --- meta-integrity/README.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/meta-integrity/README.md

Signed-off-by: Armin Kuster <akuster808@...> --- meta-integrity/conf/layer.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-integrity/conf/layer.conf

Signed-off-by: Armin Kuster <akuster808@...> --- meta-integrity/README.md | 253 ++++++++++++++++++ meta-integrity/classes/ima-evm-rootfs.bbclass | 92 +++++++

Copied meta-integrity from meta-intel-iot-security that Intel created, to carry on maintenance. This update that code base to work on master. runtime test passes on Arm H/w and qemux86-64 Armin

The check was added in August 2017 and appeared first in Rocko, so it's possible that you stuck with an earlier release until recently. Ross

<Archana.c727@...> wrote: Debian Build-Depends == OpenEmbedded DEPENDS Debian Depends == OpenEmbedded RDEPENDS Ross

Patch is attached. Thank you!

yes certainly.

Great! Would you be willing to accept a patch that makes arch-x86_64.c handle that condition like the other arches? -Shane

Hello, In my recipe, I've found that a forward slash in SRCBRANCH, results in an error during the final image construction, SRCBRANCH = "feature/compile_with_gcc7_4_rocko_toolchain" Error

Hi Khem,

Here's one way: bitbake -e virtual/kernel | grep PREFERRED_PROVIDER_virtual\/kernel # $PREFERRED_PROVIDER_virtual/kernel [2 operations] PREFERRED_PROVIDER_virtual/kernel="linux-yocto" Bruce -- -

It seems ok to me.

Hi all. How can I ask to bitbake which is the actual value of virtual/kernel? Thanks all MZ