summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHongxu Jia <hongxu.jia@windriver.com>2019-10-07 11:51:32 +0800
committerJia Zhang <qianyue.zj@alibaba-inc.com>2019-10-07 11:51:32 +0800
commit69117bef3a49ce645eee4cc6aaebb234da99c414 (patch)
treeecd80700facdd70d4fac1be013ca6517b8549559
parent2d8b45a3d8c130e072aadf8b43b16ccbcb3b741e (diff)
downloadmeta-secure-core-69117bef3a49ce645eee4cc6aaebb234da99c414.tar.gz
linux-yocto-integrity.inc: fix 'uks_modsign_keys_dir' is not defined (#119)
Since commit [b41010c linux-yocto-integrity: fix modsign key path] applied, if MODSIGN_ENABLED is "0", bbclass user-key-store will not be inherited which causing 'uks_modsign_keys_dir' is not defined Unconditionally inherit user-key-store, but conditionally invoke uks_modsign_keys_dir Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
-rw-r--r--meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc8
1 files changed, 6 insertions, 2 deletions
diff --git a/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc b/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc
index 829c485..295b97d 100644
--- a/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc
+++ b/meta-integrity/recipes-kernel/linux/linux-yocto-integrity.inc
@@ -17,11 +17,15 @@ SRC_URI += "\
17 17
18INHIBIT_PACKAGE_STRIP = "${@'1' if d.getVar('MODSIGN_ENABLED', True) == '1' else '0'}" 18INHIBIT_PACKAGE_STRIP = "${@'1' if d.getVar('MODSIGN_ENABLED', True) == '1' else '0'}"
19 19
20inherit ${@'user-key-store' if d.getVar('MODSIGN_ENABLED', True) == '1' else ''} 20inherit user-key-store
21 21
22do_configure_prepend() { 22do_configure_prepend() {
23 sys_cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/system_trusted_key.crt" 23 sys_cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/system_trusted_key.crt"
24 modsign_key="${@uks_modsign_keys_dir(d)}/modsign_key.key" 24 if [ ${MODSIGN_ENABLED} = "1" ]; then
25 modsign_key="${@uks_modsign_keys_dir(d)}/modsign_key.key"
26 else
27 modsign_key="${STAGING_DIR_TARGET}${sysconfdir}/keys/modsign_key.key"
28 fi
25 modsign_cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/modsign_key.crt" 29 modsign_cert="${STAGING_DIR_TARGET}${sysconfdir}/keys/modsign_key.crt"
26 30
27 if [ -f "$sys_cert" ]; then 31 if [ -f "$sys_cert" ]; then