diff options
| author | Sandra Tobajas <sandra.tobajas@gmail.com> | 2020-01-14 13:18:22 -0500 |
|---|---|---|
| committer | Jia Zhang <zhang.jia@linux.alibaba.com> | 2020-01-16 08:35:40 +0800 |
| commit | b2eb24569b3ac307b52973737a984839f1bb0a9a (patch) | |
| tree | 0f98c4f8f44eda2022675b418abd4b2295d3f848 | |
| parent | 44a12b93b152d76900413bb919113e1cd408e265 (diff) | |
| download | meta-secure-core-b2eb24569b3ac307b52973737a984839f1bb0a9a.tar.gz | |
user-key-store.bbclass: let MOK_SB be overrided
If efi-secure-boot distro feature is enabled, let the possibility to
enable only the UEFI SecureBoot (through UEFI_SB Bitbake variable)
without MOK_SB variable.
Allow explicitly overriding the MOK_SB Bitbake variable.
Signed-off-by: Sandra Tobajas <sandra.tobajas@savoirfairelinux.com>
| -rw-r--r-- | meta-signing-key/classes/user-key-store.bbclass | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-signing-key/classes/user-key-store.bbclass b/meta-signing-key/classes/user-key-store.bbclass index b5dd9a8..982bd18 100644 --- a/meta-signing-key/classes/user-key-store.bbclass +++ b/meta-signing-key/classes/user-key-store.bbclass | |||
| @@ -8,7 +8,7 @@ DEPENDS_append_class-target += "\ | |||
| 8 | USER_KEY_SHOW_VERBOSE = "1" | 8 | USER_KEY_SHOW_VERBOSE = "1" |
| 9 | 9 | ||
| 10 | UEFI_SB = '${@bb.utils.contains("DISTRO_FEATURES", "efi-secure-boot", "1", "0", d)}' | 10 | UEFI_SB = '${@bb.utils.contains("DISTRO_FEATURES", "efi-secure-boot", "1", "0", d)}' |
| 11 | MOK_SB = '${@bb.utils.contains("DISTRO_FEATURES", "efi-secure-boot", "1", "0", d)}' | 11 | MOK_SB ?= '${@bb.utils.contains("DISTRO_FEATURES", "efi-secure-boot", "1", "0", d)}' |
| 12 | MODSIGN = '${@bb.utils.contains("DISTRO_FEATURES", "modsign", "1", "0", d)}' | 12 | MODSIGN = '${@bb.utils.contains("DISTRO_FEATURES", "modsign", "1", "0", d)}' |
| 13 | IMA = '${@bb.utils.contains("DISTRO_FEATURES", "ima", "1", "0", d)}' | 13 | IMA = '${@bb.utils.contains("DISTRO_FEATURES", "ima", "1", "0", d)}' |
| 14 | SYSTEM_TRUSTED = '${@"1" if d.getVar("IMA", True) == "1" or d.getVar("MODSIGN", True) == "1" else "0"}' | 14 | SYSTEM_TRUSTED = '${@"1" if d.getVar("IMA", True) == "1" or d.getVar("MODSIGN", True) == "1" else "0"}' |