|
[meta-security][PATCH 3/4] dm-verity: document the meta-intel dependency in the systemd example
From: Paul Gortmaker <paul.gortmaker@...> The dependency might not be obvious to everyone, so leave a hint. Signed-off-by: Paul Gortmaker <paul.gortmaker@...> --- wic/systemd-bootdisk-dmverity.wks.in
|
From: Paul Gortmaker <paul.gortmaker@...> The dependency might not be obvious to everyone, so leave a hint. Signed-off-by: Paul Gortmaker <paul.gortmaker@...> --- wic/systemd-bootdisk-dmverity.wks.in
|
By
Paul Gortmaker
·
|
|
[meta-security][PATCH v2 4/4] integrity: Rename linux-%.bbappend to linux-yocto%.bbappend
To avoid having linux-%.bbappend included in targets unrelated to the linux kernel, rename linux-%.bbappend to linux-yocto%.bbappend. Signed-off-by: Stefan Berger <stefanb@...> --- .../linux/{linux-%.
|
To avoid having linux-%.bbappend included in targets unrelated to the linux kernel, rename linux-%.bbappend to linux-yocto%.bbappend. Signed-off-by: Stefan Berger <stefanb@...> --- .../linux/{linux-%.
|
By
Stefan Berger
·
|
|
[meta-security][PATCH v2 2/4] ima: Drop kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg
Drop the kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg. Instead, require projects that use squashfs to set this option. Signed-off-by: Stefan Berger <stefanb@...> --- meta-integrity/recipe
|
Drop the kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg. Instead, require projects that use squashfs to set this option. Signed-off-by: Stefan Berger <stefanb@...> --- meta-integrity/recipe
|
By
Stefan Berger
·
|
|
[meta-security][PATCH v2 1/4] linux: overlayfs: Drop kernel patch resolving a file change notification issue
Revert the patch resolving a file change notitfication issue (for IMA appraisal) since this patch fails in 'many downstream kernels'. - https://lists.yoctoproject.org/g/yocto/message/59928 - https://l
|
Revert the patch resolving a file change notitfication issue (for IMA appraisal) since this patch fails in 'many downstream kernels'. - https://lists.yoctoproject.org/g/yocto/message/59928 - https://l
|
By
Stefan Berger
·
|
|
[meta-security][PATCH v2 3/4] integrity: Fix the do_configure function
Append ':append' to do_configure so it does not replace all existing do_configure's. Only run 'sed' when DISTRO_FEATURES contains 'ima' and the .config file exists. Signed-off-by: Stefan Berger <stefa
|
Append ':append' to do_configure so it does not replace all existing do_configure's. Only run 'sed' when DISTRO_FEATURES contains 'ima' and the .config file exists. Signed-off-by: Stefan Berger <stefa
|
By
Stefan Berger
·
|
|
[meta-security][PATCH 1/8] Revert "ima-evm-utils: Update ima-evm-utils to v1.5 and add a patch"
9 messages
This reverts commit 9de807705b27b05bbf84e9f16502fe6cdaa8928f. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
This reverts commit 9de807705b27b05bbf84e9f16502fe6cdaa8928f. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
By
Jose Quaresma
·
|
|
[meta-zephyr][master][mickledore][PATCH] zephyr-kernel: Include efi binary generation fix for Raptor Lake too
Extend patch to include efi binary generation issue fix for x86 Raptor Lake board too. Signed-off-by: Naveen Saini <naveen.kumar.saini@...> --- ...ry-generation-issue-in-cross-compila.patch | 19 +++++
|
Extend patch to include efi binary generation issue fix for x86 Raptor Lake board too. Signed-off-by: Naveen Saini <naveen.kumar.saini@...> --- ...ry-generation-issue-in-cross-compila.patch | 19 +++++
|
By
Naveen Saini
·
|
|
[PATCH yocto-autobuilder-helper] scripts/publish-artefacts: remove all reference to deprecated edgerouter
edgerouter is no longer part of meta-yocto so we removed it from the autobuilder configuration as well. Signed-off-by: Michael Halstead <mhalstead@...> --- config.json | 8 -------- scripts/publish-art
|
edgerouter is no longer part of meta-yocto so we removed it from the autobuilder configuration as well. Signed-off-by: Michael Halstead <mhalstead@...> --- config.json | 8 -------- scripts/publish-art
|
By
Michael Halstead
·
|
|
Install complete Rust and toolchans for image?
2 messages
#rust
#yocto
#sdk
Hi, What recipes should I use in IMAGE_INSTALL to install all of Rust and toolchains things for it on my target ARM board? What Yocto release was started to support Rust? Is ti possbile a make an SDK
|
Hi, What recipes should I use in IMAGE_INSTALL to install all of Rust and toolchains things for it on my target ARM board? What Yocto release was started to support Rust? Is ti possbile a make an SDK
|
By
Livius
·
|
|
[meta-security][PATCH 0/2] Drop a kernel patch and a kernel config option
7 messages
This PR removes a kernel patch related to overlayfs and IMA appraisal file change notifictions and a squashfs xattr kernel config option. Stefan Stefan Berger (2): linux: overlayfs: Drop kernel patch
|
This PR removes a kernel patch related to overlayfs and IMA appraisal file change notifictions and a squashfs xattr kernel config option. Stefan Stefan Berger (2): linux: overlayfs: Drop kernel patch
|
By
Stefan Berger
·
|
|
[meta-security][PATCH 8/8] Revert "ima: Document and replace keys and adapt scripts for EC keys"
This reverts commit 0652c9fd7496d021f91759cc7489b6faad3e04bd. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
This reverts commit 0652c9fd7496d021f91759cc7489b6faad3e04bd. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
By
Jose Quaresma
·
|
|
[meta-security][PATCH 7/8] Revert "ima: Fix the ima_policy_appraise_all to appraise executables & libraries"
This reverts commit cb8f26d82a35ba56f3bd40cd6ba105de03602a4b. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
This reverts commit cb8f26d82a35ba56f3bd40cd6ba105de03602a4b. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
By
Jose Quaresma
·
|
|
[meta-security][PATCH 6/8] Revert "ima: Fix the IMA kernel feature"
This reverts commit f4f7624d2e50e19249e7a2a3798c1120e5183424. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
This reverts commit f4f7624d2e50e19249e7a2a3798c1120e5183424. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
By
Jose Quaresma
·
|
|
[meta-security][PATCH 5/8] Revert "ima: Rename IMA_EVM_POLICY_SYSTEMD to IMA_EVM_POLICY"
This reverts commit 292b49342cb47da59525a44227598cf136311e1b. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
This reverts commit 292b49342cb47da59525a44227598cf136311e1b. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
By
Jose Quaresma
·
|
|
[meta-security][PATCH 4/8] Revert "ima: Sign all executables and the ima-policy in the root filesystem"
This reverts commit 76f1f539a678725211283294c8b6735186055694. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
This reverts commit 76f1f539a678725211283294c8b6735186055694. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
By
Jose Quaresma
·
|
|
[meta-security][PATCH 3/8] Revert "integrity: Update the README for IMA support"
This reverts commit b9abf0e09bfea8f08cc7f2d68998f014abba5b3b. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
This reverts commit b9abf0e09bfea8f08cc7f2d68998f014abba5b3b. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
By
Jose Quaresma
·
|
|
[meta-security][PATCH 2/8] Revert "linux: overlayfs: Add kernel patch resolving a file change notification issue"
This reverts commit 319522e00dfd23c78cbe28ab26b87e08a8f46993. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
This reverts commit 319522e00dfd23c78cbe28ab26b87e08a8f46993. The full patchset are overriding the do_configure task and also added a kernel patch on meta-integrity/recipes-kernel/linux/linux_ima.inc
|
By
Jose Quaresma
·
|
|
[meta-security][PATCH 7/8] linux: overlayfs: Add kernel patch resolving a file change notification issue
12 messages
Add a temporary patch that resolves a file change notification issue with overlayfs where IMA did not become aware of the file changes since the 'lower' inode's i_version had not changed. The issue wi
|
Add a temporary patch that resolves a file change notification issue with overlayfs where IMA did not become aware of the file changes since the 'lower' inode's i_version had not changed. The issue wi
|
By
Stefan Berger
·
|
|
[meta-security][PATCH 2/2] ima: Drop kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg
Drop the kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg. Instead, require projects that use squashfs to set this option. Signed-off-by: Stefan Berger <stefanb@...> --- meta-integrity/recipe
|
Drop the kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg. Instead, require projects that use squashfs to set this option. Signed-off-by: Stefan Berger <stefanb@...> --- meta-integrity/recipe
|
By
Stefan Berger
·
|
|
[meta-security][PATCH 1/2] linux: overlayfs: Drop kernel patch resolving a file change notification issue
Revert the patch resolving a file change notitfication issue (for IMA appraisal) since this patch fails in 'many downstream kernels'. - https://lists.yoctoproject.org/g/yocto/message/59928 - https://l
|
Revert the patch resolving a file change notitfication issue (for IMA appraisal) since this patch fails in 'many downstream kernels'. - https://lists.yoctoproject.org/g/yocto/message/59928 - https://l
|
By
Stefan Berger
·
|
