diff options
| author | Jose Quaresma <quaresma.jose@gmail.com> | 2022-06-27 13:02:47 +0100 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2022-07-21 16:50:32 -0700 |
| commit | c79262a30bd385f5dbb009ef8704a1a01644528e (patch) | |
| tree | bedfe2acd5168295b8f6ce400bc8f4017df9fbf3 | |
| parent | e54e064b9a65971208492b75f6e92c107cca5f22 (diff) | |
| download | meta-security-c79262a30bd385f5dbb009ef8704a1a01644528e.tar.gz | |
meta-integrity: kernel-modsign: prevents splitting out debug symbols
Starting with [1] kernel modules symbols is being slipped in OE-core
and this breaks the kernel modules sign, so disable it.
[1] https://git.openembedded.org/openembedded-core/commit/?id=e09a8fa931fe617afc05bd5e00dca5dd3fe386e8
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit c1c80cf0c0f26215fb252242f0d70f8870916734)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
| -rw-r--r-- | meta-integrity/classes/kernel-modsign.bbclass | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-integrity/classes/kernel-modsign.bbclass b/meta-integrity/classes/kernel-modsign.bbclass index 093c358..d3aa7fb 100644 --- a/meta-integrity/classes/kernel-modsign.bbclass +++ b/meta-integrity/classes/kernel-modsign.bbclass | |||
| @@ -13,7 +13,9 @@ MODSIGN_PRIVKEY ?= "${MODSIGN_KEY_DIR}/privkey_modsign.pem" | |||
| 13 | MODSIGN_X509 ?= "${MODSIGN_KEY_DIR}/x509_modsign.crt" | 13 | MODSIGN_X509 ?= "${MODSIGN_KEY_DIR}/x509_modsign.crt" |
| 14 | 14 | ||
| 15 | # If this class is enabled, disable stripping signatures from modules | 15 | # If this class is enabled, disable stripping signatures from modules |
| 16 | # as well disable the debug symbols split | ||
| 16 | INHIBIT_PACKAGE_STRIP = "1" | 17 | INHIBIT_PACKAGE_STRIP = "1" |
| 18 | INHIBIT_PACKAGE_DEBUG_SPLIT = "1" | ||
| 17 | 19 | ||
| 18 | kernel_do_configure:prepend() { | 20 | kernel_do_configure:prepend() { |
| 19 | if [ -f "${MODSIGN_PRIVKEY}" -a -f "${MODSIGN_X509}" ]; then | 21 | if [ -f "${MODSIGN_PRIVKEY}" -a -f "${MODSIGN_X509}" ]; then |