summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* README updateLans Zhang2017-07-191-9/+46
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* sign_rpm_ext: remove the test linesLans Zhang2017-07-191-4/+0
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* IMA: enable RPM file signing if ima is configuredLans Zhang2017-07-191-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* rpm: allow to enable IMA signingLans Zhang2017-07-1812-0/+805
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader: sync up with upstreamLans Zhang2017-07-131-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Add the missing COPYING.MIT filesLans Zhang2017-07-135-0/+85
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-efi-secure-boot/README.md: updateLans Zhang2017-07-131-134/+162
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* libfile-slurp: code style fixupLans Zhang2017-07-131-4/+6
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader,libsign: fix homepage URLsLans Zhang2017-07-132-2/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: add author and homepage infoLans Zhang2017-07-131-0/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* efitools: code style fixupLans Zhang2017-07-133-21/+22
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* create-user-key-store.sh: add the support of the creation for RPM signingLans Zhang2017-07-132-0/+67
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader, libsign, cryptfs-tpm2: code style fixupLans Zhang2017-07-133-20/+28
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* grub-efi: carry forward mok2verify to grub-2.02Lans Zhang2017-07-132-76/+156
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* packagegroup-efi-secure-boot: make sure grub never be installedLans Zhang2017-07-121-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* grub-efi: rebased to 2.02Lans Zhang2017-07-124-110/+24
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Add .github/CODEOWNERSLans Zhang2017-07-121-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Fix the occurrence of checking the existence of signing keysLans Zhang2017-07-129-10/+8
| | | | | | packagegroups are not the end consumers of using user-key-store. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* key-store-rpm-pubkey: fix installation failureLans Zhang2017-07-111-2/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* packagegroup-efi-secure-boot/packagegroup-ima: depend on check_deploy_keysLans Zhang2017-07-112-0/+10
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* README: fix a typoLans Zhang2017-07-111-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* README: cleanupLans Zhang2017-07-111-24/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* keyutils: fix build failure with ppcLans Zhang2017-07-112-29/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* README: cleanupLans Zhang2017-07-111-7/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* user-key-store: don't call anonymous functionLans Zhang2017-07-111-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* mokutil: code style fixupLans Zhang2017-07-111-7/+9
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* mokutil: add the COMPATIBLE_HOSTLans Zhang2017-07-111-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: enable http boot supportLans Zhang2017-07-111-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image: install lsb packagegroupLans Zhang2017-07-111-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-integrity: enable sign_rpm_ext to support rpm and file signingLans Zhang2017-07-112-0/+22
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* create-user-key-store.sh: clean up subject and support password protection ↵Lans Zhang2017-07-111-12/+23
| | | | | | for private key Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: add RRECOMMENDSLans Zhang2017-07-111-0/+7
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-signing-key: replace the sample keysLans Zhang2017-07-1114-283/+286
| | | | | | | - Remove USER@host from the certificate subject field - IMA signing key is protected by a password Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* base-file: mount securityfsLans Zhang2017-07-111-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* IMA: clean up IMA signingLans Zhang2017-07-113-178/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init: don't need to create /proc /sys and /runLans Zhang2017-07-051-1/+0
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Clean up RDEPENDSLans Zhang2017-07-055-32/+64
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: sync up with upstreamLans Zhang2017-07-051-2/+6
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* cryptfs-tpm2: code style fixupLans Zhang2017-07-051-13/+15
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init: clean upLans Zhang2017-07-041-80/+40
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* ima-policy: enable policy checkLans Zhang2017-07-041-0/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-ima: clean up code style and RDEPENDSLans Zhang2017-07-041-23/+20
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init.ima: code style cleanupLans Zhang2017-07-041-14/+8
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Code style fixupLans Zhang2017-07-044-21/+20
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: clean up RDEPENDSLans Zhang2017-07-041-14/+29
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* packagegroup-ima*: clean up the RDEPENDSLans Zhang2017-07-042-11/+5
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: renamed from initramfs-secure-coreLans Zhang2017-07-042-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initramfs-secure-core: clean up /init scriptLans Zhang2017-07-042-15/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-integrity: implement the system trusted cert and IMA trusted certLans Zhang2017-07-0411-80/+110
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-signing-key: enable authorityKeyIdentifier for x509 v3Lans Zhang2017-07-036-54/+57
| | | | | | | Otherwise the x509 parser in kernel cannot load a x509 certificate without authorityKeyIdentifier. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-06-29 18:30:19 +0000