Re: [yocto] [meta-security][PATCH] ima-evm-keys: add file-checksums to IMA_EVM_X509

[akuster]

merged,
thanks

On 3/12/21 1:53 AM, liu.min...@gmail.com wrote:
> From: Ming Liu 
>
> This ensures when a end user change the IMA_EVM_X509 key file,
> ima-evm-keys recipe will be rebuilt.
>
> Signed-off-by: Ming Liu 
> ---
>  meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb | 1 +
>  1 file changed, 1 insertion(+)
>
> diff --git a/meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb 
> b/meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb
> index 62685bb..7708aef 100644
> --- a/meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb
> +++ b/meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb
> @@ -14,3 +14,4 @@ do_install () {
>  lnr ${D}${sysconfdir}/keys/x509_evm.der 
> ${D}${sysconfdir}/keys/x509_ima.der
>  fi
>  }
> +do_install[file-checksums] += "${@'${IMA_EVM_X509}:%s' % 
> os.path.exists('${IMA_EVM_X509}')}"


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#52766): https://lists.yoctoproject.org/g/yocto/message/52766
Mute This Topic: https://lists.yoctoproject.org/mt/81275663/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[yocto] [meta-security][PATCH] ima-evm-keys: add file-checksums to IMA_EVM_X509

[Ming Liu]

From: Ming Liu 

This ensures when a end user change the IMA_EVM_X509 key file,
ima-evm-keys recipe will be rebuilt.

Signed-off-by: Ming Liu 
---
 meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb 
b/meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb
index 62685bb..7708aef 100644
--- a/meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb
+++ b/meta-integrity/recipes-security/ima-evm-keys/ima-evm-keys_1.0.bb
@@ -14,3 +14,4 @@ do_install () {
 lnr ${D}${sysconfdir}/keys/x509_evm.der 
${D}${sysconfdir}/keys/x509_ima.der
 fi
 }
+do_install[file-checksums] += "${@'${IMA_EVM_X509}:%s' % 
os.path.exists('${IMA_EVM_X509}')}"
-- 
2.29.0


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#52681): https://lists.yoctoproject.org/g/yocto/message/52681
Mute This Topic: https://lists.yoctoproject.org/mt/81275663/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-