summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Add .github/CODEOWNERSLans Zhang2017-07-121-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Fix the occurrence of checking the existence of signing keysLans Zhang2017-07-129-10/+8
| | | | | | packagegroups are not the end consumers of using user-key-store. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* key-store-rpm-pubkey: fix installation failureLans Zhang2017-07-111-2/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* packagegroup-efi-secure-boot/packagegroup-ima: depend on check_deploy_keysLans Zhang2017-07-112-0/+10
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* README: fix a typoLans Zhang2017-07-111-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* README: cleanupLans Zhang2017-07-111-24/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* keyutils: fix build failure with ppcLans Zhang2017-07-112-29/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* README: cleanupLans Zhang2017-07-111-7/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* user-key-store: don't call anonymous functionLans Zhang2017-07-111-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* mokutil: code style fixupLans Zhang2017-07-111-7/+9
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* mokutil: add the COMPATIBLE_HOSTLans Zhang2017-07-111-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: enable http boot supportLans Zhang2017-07-111-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image: install lsb packagegroupLans Zhang2017-07-111-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-integrity: enable sign_rpm_ext to support rpm and file signingLans Zhang2017-07-112-0/+22
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* create-user-key-store.sh: clean up subject and support password protection ↵Lans Zhang2017-07-111-12/+23
| | | | | | for private key Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: add RRECOMMENDSLans Zhang2017-07-111-0/+7
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-signing-key: replace the sample keysLans Zhang2017-07-1114-283/+286
| | | | | | | - Remove USER@host from the certificate subject field - IMA signing key is protected by a password Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* base-file: mount securityfsLans Zhang2017-07-111-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* IMA: clean up IMA signingLans Zhang2017-07-113-178/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init: don't need to create /proc /sys and /runLans Zhang2017-07-051-1/+0
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Clean up RDEPENDSLans Zhang2017-07-055-32/+64
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: sync up with upstreamLans Zhang2017-07-051-2/+6
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: code style fixupLans Zhang2017-07-051-13/+15
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init: clean upLans Zhang2017-07-041-80/+40
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* ima-policy: enable policy checkLans Zhang2017-07-041-0/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-ima: clean up code style and RDEPENDSLans Zhang2017-07-041-23/+20
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init.ima: code style cleanupLans Zhang2017-07-041-14/+8
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Code style fixupLans Zhang2017-07-044-21/+20
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: clean up RDEPENDSLans Zhang2017-07-041-14/+29
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* packagegroup-ima*: clean up the RDEPENDSLans Zhang2017-07-042-11/+5
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: renamed from initramfs-secure-coreLans Zhang2017-07-042-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initramfs-secure-core: clean up /init scriptLans Zhang2017-07-042-15/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-integrity: implement the system trusted cert and IMA trusted certLans Zhang2017-07-0411-80/+110
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-signing-key: enable authorityKeyIdentifier for x509 v3Lans Zhang2017-07-036-54/+57
| | | | | | | Otherwise the x509 parser in kernel cannot load a x509 certificate without authorityKeyIdentifier. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader: sync up with upstreamLans Zhang2017-07-031-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-signing-keys: use DER-formatted system trusted key and signed IMA ↵Lans Zhang2017-07-034-52/+52
| | | | | | trusted key Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* user-key-store: clean up the code styleLans Zhang2017-07-031-80/+16
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Use the DER-formatted system trusted keyLans Zhang2017-07-033-7/+30
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init: clean up code styleLans Zhang2017-07-031-34/+30
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Rename .pem to .crtLans Zhang2017-07-0315-43/+24
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initramfs-secure-core: fix missing the license fileLans Zhang2017-07-031-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initramfs-secure-core: define the /init script for the initramfs imageLans Zhang2017-07-032-0/+162
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* kernel-initramfs: define this package to include the initramfs image for ↵Lans Zhang2017-07-032-0/+132
| | | | | | kernel boot Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image-initramfs: define the initramfs image typeLans Zhang2017-07-031-0/+35
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image: clean up the code styleLans Zhang2017-07-031-3/+10
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: fix OVMF crashLans Zhang2017-06-303-13/+45
| | | | | | | | - httpboot.o cannot be built if ".PRECIOUS: " is placed ahead of "<tab>CFLAGS +=". - uri pointer should not be freed if NULL. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: clean up the code styleLans Zhang2017-06-301-27/+29
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* code style fixupLans Zhang2017-06-2910-42/+51
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* create-user-key-store.sh: restructured for self-signing and ca signingLans Zhang2017-06-291-57/+51
| | | | | | Meanwhile, the IMA user key is signed by system user key. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image: install ima-related packages if ima feature configuredLans Zhang2017-06-261-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 20:45:56 +0000