From: Paul Gortmaker <[email protected]> Some platform creators tend to list a whole bunch of layers by default in conf/bblayers.conf. Without getting into the debate of whether that is a good idea, it can tend to have the effect of people seeing the meta-security DISTRO_FEATURES warning time and time again and becoming essentially numb to it.
After having fallen into this trap myself, I figured it was worth the extra mention in the dm-verity doc so there is a better chance of users realizing "hey - this applies to me!". Signed-off-by: Paul Gortmaker <[email protected]> --- docs/dm-verity.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/dm-verity.txt b/docs/dm-verity.txt index 602a82693930..ce1839520982 100644 --- a/docs/dm-verity.txt +++ b/docs/dm-verity.txt @@ -31,6 +31,8 @@ Kernel Configuration Kernel configuration for dm-verity happens automatically via IMAGE_CLASSES which will source features/device-mapper/dm-verity.scc when dm-verity-img is used. [See commit d9feafe991c] +IMPORTANT: As per the top level README, you *must* put security in the +DISTRO_FEATURES, or else you won't get the dm-verity kernel settings. Supported Platforms ------------------- -- 2.40.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#59973): https://lists.yoctoproject.org/g/yocto/message/59973 Mute This Topic: https://lists.yoctoproject.org/mt/98808913/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
