summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJia Zhang <zhang.jia@linux.alibaba.com>2018-09-20 10:08:23 -0400
committerJia Zhang <zhang.jia@linux.alibaba.com>2018-09-21 03:20:23 -0400
commit1423a3c5c594fb5b4f6131a42c8d3e243d4958b8 (patch)
treea99b00bba063d86eadd9506d1ebda17e501f94e2
parentab99b6a8920a8c40c681e7b6d5d7bed86514cba3 (diff)
downloadmeta-secure-core-1423a3c5c594fb5b4f6131a42c8d3e243d4958b8.tar.gz
Maintain the stable branch rocko
The modifications based on the following commits are made by the way: - seloader: Fix building for rocko (bc6bbe2) - meta-integrity: rpm: Add back in required patches for rocko (5fa9c85) Because the sanity check for rocko now becomes unnecessary. In addition, the meta-intel-sgx is removed because it is still experimental. - meta-intel-sgx: Initial support of linux-sgx-driver (7d4f711) Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
-rw-r--r--MAINTAINERS2
-rw-r--r--README6
-rw-r--r--meta-efi-secure-boot/conf/layer.conf2
-rw-r--r--meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb3
-rw-r--r--meta-encrypted-storage/conf/layer.conf2
-rw-r--r--meta-ids/conf/layer.conf2
-rw-r--r--meta-integrity/conf/layer.conf2
-rw-r--r--meta-integrity/recipes-devtools/rpm/rpm-integrity.inc3
-rw-r--r--meta-intel-sgx/README.md23
-rw-r--r--meta-intel-sgx/conf/layer.conf18
-rw-r--r--meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb34
-rw-r--r--meta-signing-key/conf/layer.conf2
-rw-r--r--meta-tpm/conf/layer.conf2
-rw-r--r--meta-tpm2/conf/layer.conf2
-rw-r--r--meta/conf/layer.conf2
15 files changed, 14 insertions, 91 deletions
diff --git a/MAINTAINERS b/MAINTAINERS
index 60f11fa..34d0fc4 100644
--- a/MAINTAINERS
+++ b/MAINTAINERS
@@ -1 +1 @@
Jia Zhang <zhang.jia@linux.alibaba.com> Tom Rini <trini@konsulko.com>
diff --git a/README b/README
index 8c0ebff..651f75b 100644
--- a/README
+++ b/README
@@ -10,11 +10,11 @@ Dependencies
10This layer depends on: 10This layer depends on:
11 11
12 URI: git://git.openembedded.org/bitbake 12 URI: git://git.openembedded.org/bitbake
13 branch: master 13 branch: rocko
14 14
15 URI: git://git.openembedded.org/openembedded-core 15 URI: git://git.openembedded.org/openembedded-core
16 layers: meta 16 layers: meta
17 branch: master 17 branch: rocko
18 18
19 19
20Patches 20Patches
@@ -23,7 +23,7 @@ Patches
23Please submit any patches against the meta-secure-core layer to the 23Please submit any patches against the meta-secure-core layer to the
24maintainer: 24maintainer:
25 25
26Maintainer: Jia Zhang <lans.zhang2008@gmail.com> 26Maintainer: Tom Rini <trini@konsulko.com>
27 27
28 28
29Table of Contents 29Table of Contents
diff --git a/meta-efi-secure-boot/conf/layer.conf b/meta-efi-secure-boot/conf/layer.conf
index 7d69fea..458eb52 100644
--- a/meta-efi-secure-boot/conf/layer.conf
+++ b/meta-efi-secure-boot/conf/layer.conf
@@ -19,4 +19,4 @@ LAYERDEPENDS_efi-secure-boot = "\
19 perl-layer \ 19 perl-layer \
20" 20"
21 21
22LAYERSERIES_COMPAT_efi-secure-boot = "rocko sumo" 22LAYERSERIES_COMPAT_efi-secure-boot = "rocko"
diff --git a/meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb b/meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb
index 5d5fe2d..3275cc5 100644
--- a/meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb
+++ b/meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb
@@ -43,10 +43,9 @@ EXTRA_OEMAKE = "\
43 SBSIGN=${STAGING_BINDIR_NATIVE}/sbsign \ 43 SBSIGN=${STAGING_BINDIR_NATIVE}/sbsign \
44 gnuefi_libdir=${STAGING_LIBDIR} \ 44 gnuefi_libdir=${STAGING_LIBDIR} \
45 LIB_GCC="`${CC} -print-libgcc-file-name`" \ 45 LIB_GCC="`${CC} -print-libgcc-file-name`" \
46 GNU_EFI_VERSION=306 \
46" 47"
47 48
48EXTRA_OEMAKE += "${@bb.utils.contains('LAYERSERIES_CORENAMES', 'rocko', 'GNU_EFI_VERSION=306', '', d)}"
49
50EFI_ARCH_x86 = "ia32" 49EFI_ARCH_x86 = "ia32"
51EFI_ARCH_x86-64 = "x64" 50EFI_ARCH_x86-64 = "x64"
52 51
diff --git a/meta-encrypted-storage/conf/layer.conf b/meta-encrypted-storage/conf/layer.conf
index 18fa131..dd85e7a 100644
--- a/meta-encrypted-storage/conf/layer.conf
+++ b/meta-encrypted-storage/conf/layer.conf
@@ -17,4 +17,4 @@ LAYERDEPENDS_encrypted-storage = "\
17 openembedded-layer \ 17 openembedded-layer \
18" 18"
19 19
20LAYERSERIES_COMPAT_encrypted-storage = "rocko sumo" 20LAYERSERIES_COMPAT_encrypted-storage = "rocko"
diff --git a/meta-ids/conf/layer.conf b/meta-ids/conf/layer.conf
index 50cc3cc..677772e 100644
--- a/meta-ids/conf/layer.conf
+++ b/meta-ids/conf/layer.conf
@@ -16,4 +16,4 @@ LAYERDEPENDS_ids = "\
16 networking-layer \ 16 networking-layer \
17" 17"
18 18
19LAYERSERIES_COMPAT_ids = "rocko sumo" 19LAYERSERIES_COMPAT_ids = "rocko"
diff --git a/meta-integrity/conf/layer.conf b/meta-integrity/conf/layer.conf
index 74961cc..7734e5c 100644
--- a/meta-integrity/conf/layer.conf
+++ b/meta-integrity/conf/layer.conf
@@ -27,4 +27,4 @@ BB_HASHBASE_WHITELIST_append += "\
27 RPM_FSK_PATH \ 27 RPM_FSK_PATH \
28" 28"
29 29
30LAYERSERIES_COMPAT_integrity = "rocko sumo" 30LAYERSERIES_COMPAT_integrity = "rocko"
diff --git a/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc b/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc
index 172d5a2..aeb7c07 100644
--- a/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc
+++ b/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc
@@ -1,6 +1,6 @@
1FILESEXTRAPATHS_prepend := "${THISDIR}/rpm:" 1FILESEXTRAPATHS_prepend := "${THISDIR}/rpm:"
2 2
3ROCKO_SRC_URI = "\ 3SRC_URI += "\
4 file://0001-Pass-sign-arguments-to-signature-deletion-too.patch \ 4 file://0001-Pass-sign-arguments-to-signature-deletion-too.patch \
5 file://0002-Beat-some-sense-into-rpmsign-cli-parsing.patch \ 5 file://0002-Beat-some-sense-into-rpmsign-cli-parsing.patch \
6 file://0003-Fix-thinko-typo-in-file-signing-error-message.patch \ 6 file://0003-Fix-thinko-typo-in-file-signing-error-message.patch \
@@ -13,7 +13,6 @@ ROCKO_SRC_URI = "\
13 file://0010-Fix-a-number-of-problems-in-get_fskpass.patch \ 13 file://0010-Fix-a-number-of-problems-in-get_fskpass.patch \
14 file://0011-Bump-file-digests-to-SHA256-by-default-finally.patch \ 14 file://0011-Bump-file-digests-to-SHA256-by-default-finally.patch \
15" 15"
16SRC_URI += "${@bb.utils.contains('LAYERSERIES_CORENAMES', 'rocko', '${ROCKO_SRC_URI}', '', d)}"
17 16
18PACKAGECONFIG = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'imaevm', '', d)}" 17PACKAGECONFIG = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'imaevm', '', d)}"
19 18
diff --git a/meta-intel-sgx/README.md b/meta-intel-sgx/README.md
deleted file mode 100644
index d1b8444..0000000
--- a/meta-intel-sgx/README.md
+++ /dev/null
@@ -1,23 +0,0 @@
1### Overview
2This layer provides the support of Intel Software Guard Extensions
3(Intel SGX), which is an Intel technology for application developers
4seeking to protect select code and data from disclosure or modification.
5
6The Linux SGX software stack is comprised of the Intel SGX driver, the
7Intel SGX SDK, and the Intel SGX Platform Software.
8
9### Intel SGX Driver
10The recipe sgx-driver provides a out-of-tree driver for the Linux Intel
11SGX software stack, which will be used until the driver upstreaming process
12is complete.
13
14### Intel SGX SDK and PSW
15The recipes are still in development.
16
17### Hardware Support
18Please check [this site](https://github.com/ayeks/SGX-hardware) for the
19latest information.
20
21### Reference
22- [SGX driver](https://github.com/intel/linux-sgx-driver)
23- [SGX SDK and PSW](https://github.com/intel/linux-sgx)
diff --git a/meta-intel-sgx/conf/layer.conf b/meta-intel-sgx/conf/layer.conf
deleted file mode 100644
index 8dca356..0000000
--- a/meta-intel-sgx/conf/layer.conf
+++ /dev/null
@@ -1,18 +0,0 @@
1# We have a conf and classes directory, add to BBPATH
2BBPATH .= ":${LAYERDIR}"
3
4# We have recipes-* directories, add to BBFILES
5BBFILES += "${LAYERDIR}/recipes-*/*/*.bb \
6 ${LAYERDIR}/recipes-*/*/*.bbappend"
7
8BBFILE_COLLECTIONS += "intel-sgx"
9BBFILE_PATTERN_intel-sgx = "^${LAYERDIR}/"
10BBFILE_PRIORITY_intel-sgx = "10"
11
12BBLAYERS_LAYERINDEX_NAME_intel-sgx = "meta-intel-sgx"
13
14LAYERDEPENDS_intel-sgx = "\
15 core \
16"
17
18LAYERSERIES_COMPAT_intel-sgx = "rocko sumo"
diff --git a/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb b/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb
deleted file mode 100644
index b1abcd5..0000000
--- a/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb
+++ /dev/null
@@ -1,34 +0,0 @@
1SUMMARY = "Intel SGX Linux DDDriver"
2DESCRIPTION = "Intel(R) Software Guard Extensions (Intel(R) SGX) \
3is an Intel technology for application developers seeking to \
4protect select code and data from disclosure or modification."
5HOMEPAGE = "https://github.com/intel/linux-sgx-driver"
6
7LICENSE = "GPLv2"
8LIC_FILES_CHKSUM = "file://License.txt;md5=b54f8941f6087efb6be3deb0f1e617f7"
9
10DEPENDS = "virtual/kernel"
11
12PV = "2.1+git${SRCPV}"
13
14SRC_URI = "\
15 git://github.com/intel/linux-sgx-driver.git \
16"
17SRCREV = "2a509c203533f9950fa3459fe91864051bc021a2"
18
19S = "${WORKDIR}/git"
20
21inherit module
22
23EXTRA_OEMAKE += "KDIR='${STAGING_KERNEL_DIR}'"
24
25MODULE_NAME = "isgx"
26
27do_install () {
28 dir="${D}/lib/modules/${KERNEL_VERSION}/kernel/${MODULE_NAME}"
29
30 install -d "$dir"
31 install -m 0644 "${MODULE_NAME}.ko" "$dir"
32}
33
34RPROVIDES_${PN} += "kernel-module-${MODULE_NAME}"
diff --git a/meta-signing-key/conf/layer.conf b/meta-signing-key/conf/layer.conf
index 67fc8d3..97694d5 100644
--- a/meta-signing-key/conf/layer.conf
+++ b/meta-signing-key/conf/layer.conf
@@ -13,7 +13,7 @@ BBLAYERS_LAYERINDEX_NAME_signing-key = "meta-signing-key"
13 13
14LAYERDEPENDS_signing-key = "core" 14LAYERDEPENDS_signing-key = "core"
15 15
16LAYERSERIES_COMPAT_signing-key = "rocko sumo" 16LAYERSERIES_COMPAT_signing-key = "rocko"
17 17
18SIGNING_MODEL ??= "sample" 18SIGNING_MODEL ??= "sample"
19SAMPLE_MOK_SB_KEYS_DIR = "${LAYERDIR}/files/mok_sb_keys" 19SAMPLE_MOK_SB_KEYS_DIR = "${LAYERDIR}/files/mok_sb_keys"
diff --git a/meta-tpm/conf/layer.conf b/meta-tpm/conf/layer.conf
index 2b2dd3e..6f150b8 100644
--- a/meta-tpm/conf/layer.conf
+++ b/meta-tpm/conf/layer.conf
@@ -13,4 +13,4 @@ BBLAYERS_LAYERINDEX_NAME_tpm = "meta-tpm"
13 13
14LAYERDEPENDS_tpm = "core" 14LAYERDEPENDS_tpm = "core"
15 15
16LAYERSERIES_COMPAT_tpm = "rocko sumo" 16LAYERSERIES_COMPAT_tpm = "rocko"
diff --git a/meta-tpm2/conf/layer.conf b/meta-tpm2/conf/layer.conf
index 9957c6e..71063d4 100644
--- a/meta-tpm2/conf/layer.conf
+++ b/meta-tpm2/conf/layer.conf
@@ -13,4 +13,4 @@ BBLAYERS_LAYERINDEX_NAME_tpm2 = "meta-tpm2"
13 13
14LAYERDEPENDS_tpm2 = "core" 14LAYERDEPENDS_tpm2 = "core"
15 15
16LAYERSERIES_COMPAT_tpm2 = "rocko sumo" 16LAYERSERIES_COMPAT_tpm2 = "rocko"
diff --git a/meta/conf/layer.conf b/meta/conf/layer.conf
index 301b017..b343571 100644
--- a/meta/conf/layer.conf
+++ b/meta/conf/layer.conf
@@ -15,4 +15,4 @@ LAYERDEPENDS_secure-core = "\
15 core \ 15 core \
16" 16"
17 17
18LAYERSERIES_COMPAT_secure-core = "rocko sumo" 18LAYERSERIES_COMPAT_secure-core = "rocko"