summaryrefslogtreecommitdiffstats
path: root/external/meta-security/meta-integrity/recipes-core/base-files
diff options
context:
space:
mode:
Diffstat (limited to 'external/meta-security/meta-integrity/recipes-core/base-files')
-rw-r--r--external/meta-security/meta-integrity/recipes-core/base-files/base-files-ima.inc5
-rw-r--r--external/meta-security/meta-integrity/recipes-core/base-files/base-files_%.bbappend1
2 files changed, 6 insertions, 0 deletions
diff --git a/external/meta-security/meta-integrity/recipes-core/base-files/base-files-ima.inc b/external/meta-security/meta-integrity/recipes-core/base-files/base-files-ima.inc
new file mode 100644
index 00000000..7e9e2108
--- /dev/null
+++ b/external/meta-security/meta-integrity/recipes-core/base-files/base-files-ima.inc
@@ -0,0 +1,5 @@
+# Append iversion option for auto types
+do_install_append() {
+ sed -i 's/\s*auto\s*defaults/&,iversion/' "${D}${sysconfdir}/fstab"
+ echo 'securityfs /sys/kernel/security securityfs defaults 0 0' >> "${D}${sysconfdir}/fstab"
+}
diff --git a/external/meta-security/meta-integrity/recipes-core/base-files/base-files_%.bbappend b/external/meta-security/meta-integrity/recipes-core/base-files/base-files_%.bbappend
new file mode 100644
index 00000000..c006f0e6
--- /dev/null
+++ b/external/meta-security/meta-integrity/recipes-core/base-files/base-files_%.bbappend
@@ -0,0 +1 @@
+require ${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'base-files-ima.inc', '', d)}