diff options
author | Hongxu Jia <hongxu.jia@windriver.com> | 2019-10-07 11:51:32 +0800 |
---|---|---|
committer | Jia Zhang <qianyue.zj@alibaba-inc.com> | 2019-10-07 11:51:32 +0800 |
commit | 69117bef3a49ce645eee4cc6aaebb234da99c414 (patch) | |
tree | ecd80700facdd70d4fac1be013ca6517b8549559 | |
parent | 2d8b45a3d8c130e072aadf8b43b16ccbcb3b741e (diff) | |
download | meta-secure-core-69117bef3a49ce645eee4cc6aaebb234da99c414.tar.gz |
linux-yocto-integrity.inc: fix 'uks_modsign_keys_dir' is not defined (#119)
Since commit [b41010c linux-yocto-integrity: fix modsign key path] applied,
if MODSIGN_ENABLED is "0", bbclass user-key-store will not be inherited
which causing 'uks_modsign_keys_dir' is not defined
Unconditionally inherit user-key-store, but conditionally invoke
uks_modsign_keys_dir
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
-rw-r--r-- | meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc b/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc index 829c485..295b97d 100644 --- a/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc +++ b/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc | |||
@@ -17,11 +17,15 @@ SRC_URI += "\ | |||
17 | 17 | ||
18 | INHIBIT_PACKAGE_STRIP = "${@'1' if d.getVar('MODSIGN_ENABLED', True) == '1' else '0'}" | 18 | INHIBIT_PACKAGE_STRIP = "${@'1' if d.getVar('MODSIGN_ENABLED', True) == '1' else '0'}" |
19 | 19 | ||
20 | inherit ${@'user-key-store' if d.getVar('MODSIGN_ENABLED', True) == '1' else ''} | 20 | inherit user-key-store |
21 | 21 | ||
22 | do_configure_prepend() { | 22 | do_configure_prepend() { |
23 | sys_cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/system_trusted_key.crt" | 23 | sys_cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/system_trusted_key.crt" |
24 | modsign_key="${@uks_modsign_keys_dir(d)}/modsign_key.key" | 24 | if [ ${MODSIGN_ENABLED} = "1" ]; then |
25 | modsign_key="${@uks_modsign_keys_dir(d)}/modsign_key.key" | ||
26 | else | ||
27 | modsign_key="${STAGING_DIR_TARGET}${sysconfdir}/keys/modsign_key.key" | ||
28 | fi | ||
25 | modsign_cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/modsign_key.crt" | 29 | modsign_cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/modsign_key.crt" |
26 | 30 | ||
27 | if [ -f "$sys_cert" ]; then | 31 | if [ -f "$sys_cert" ]; then |