summaryrefslogtreecommitdiffstats
path: root/recipes-kernel
Commit message (Collapse)AuthorAgeFilesLines
* lkrg-module: update to 0.9.7Armin Kuster2023-09-251-2/+2
| | | | | | LIC_FILES_CHKSUM changed due to year update Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto-rt: Add the bbappend for rt kernelKevin Hao2023-08-061-0/+1
| | | | | | | | So that the security features in this layer can be used on the rt kernel. Signed-off-by: Kevin Hao <kexin.hao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg-modules: update to 0.9.6Armin Kuster2023-03-201-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: drop version from bbappendsMikko Rapeli2023-02-061-0/+0
| | | | | | | | | | | | | | | | | | | These bbappends apply to multiple kernel versions so no need to make them version dependent. Fixes recipe parsing when using meta-security master branch on kirkstone. In our custom layer we set layer compatibility for kirkstone and I understand why meta-security upstream would not want to do that: LAYERSERIES_COMPAT_security-layer += 'kirkstone' LAYERSERIES_COMPAT_parsec-layer += 'kirkstone' LAYERSERIES_COMPAT_tpm-layer += 'kirkstone' While I work towards supporting also yocto master branch and newer releases than kirkstone, I would appreciate if I would not have to branch off layers over minor details like this. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto.bbappend: bump to kernel version 6.xArmin Kuster2023-01-281-0/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg-module: update to 0.9.5Armin Kuster2022-08-061-0/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg: update to 0.9.4Armin Kuster2022-08-022-59/+10
| | | | | | | | | | | | drop Makefile fixup patch. Use sed instead LIC_FILES_CHKSUM update do to yr update Signed-off-by: Armin Kuster <akuster808@gmail.com> --- V2] Add LIC_FILES_CHKSUM change reason
* lkrg: update to 0.9.3Armin Kuster2022-07-052-49/+30
| | | | | | refresh patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto_security.inc: add lkrg kfragsArmin Kuster2022-04-073-0/+12
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg-module: covert to git fetcherArmin Kuster2022-04-072-8/+8
| | | | | | | | This allows to track tip easier. refresh patch Fix LICENSE to match SPDX format Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg-module: update to 0.9.2Armin Kuster2022-02-042-6/+6
| | | | | | | | | | | see https://github.com/lkrg-org/lkrg Support new stable and mainline kernels 5.14 to at least 5.16-rc* Support new longterm kernels 5.4.118+, 4.19.191+, 4.14.233+ update SRC_URI as location changed. refresh patch. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security: Convert to new override syntaxArmin Kuster2021-08-012-4/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto-dev: drop bbappendArmin Kuster2021-06-061-1/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security/recipe-kernel: use sanity checkArmin Kuster2021-06-063-6/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-%_5.%.bbappend: drop recipeArmin Kuster2021-06-051-4/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg-module: update 0.9.1Armin Kuster2021-06-051-2/+2
| | | | | | LIC_FILES_CHKSUM updated do to yr change and adding new copyrights Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg-module: Add Linux Kernel Runtime GuardArmin Kuster2021-04-142-0/+106
| | | | | | | | | | | | | | | | | | For more info see: https://github.com/openwall/lkrg Add to local.conf: IMAGE_INSTALL_append = " kernel-module-lkrg" Need these kconfig options enabled: CONFIG_KALLSYMS_ALL=y CONFIG_JUMP_LABEL=y CONFIG_DEBUG_KERNEL=y To invoke module: sudo insmod {path-to-modules}/p_lkrg.ko kint_enforce=1 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-%/5.x: Add dm-verity fragment as neededNaveen Saini2020-10-091-1/+1
| | | | | | | | Add checks that include dm-verity specific kernel config fragment when dm-verity-img.bbclass is used. Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto(-dev): Add dm-verity fragment as neededniko.mauno@vaisala.com2020-09-122-0/+2
| | | | | | | | Add checks that include dm-verity specific kernel config fragment when dm-verity-img.bbclass is used. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: update the bbappend to 5.xMingli Yu2020-03-051-0/+2
| | | | | | | | | | | | As linux-yocto upgraded to 5.x in oe-core, update the bbappend to 5.x to remove the warning: WARNING: No recipes available for: /buildarea/layers/meta-security/recipes-kernel/linux/linux-yocto_4.%.bbappend Signed-off-by: Mingli Yu <mingli.yu@windriver.com> [Droped 4.x part] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux: drop the bbappend for linux v4.x seriesBartosz Golaszewski2020-03-011-2/+0
| | | | | | | | v4.19 LTS has been dropped in poky in favor of v5.4. Drop the bbappend from meta-security as right now the build fails. Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto-dev: remove "+"Armin Kuster2020-01-281-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-stable: rename to more generic bbappendArmin Kuster2019-08-241-0/+0
| | | | | | use wildcards Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto-dev: update to use kernel cacheArmin Kuster2019-08-151-11/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: use 4.19 kernel cache nowArmin Kuster2019-08-156-38/+2
| | | | | | | | | remove kernel fragments now that they are in the kernel-cache for 4.19 update bbappend accordingly. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-stable/5.2: add stable bbappendArmin Kuster2019-08-151-0/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-%: remove kernel fragments now in cacheArmin Kuster2019-08-155-28/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* kernel: Add conditional inclusion of fragments for linux-yocto-devHe Zhe2019-06-261-0/+11
| | | | | Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-bbappends: simplifyArmin Kuster2019-06-266-4/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack: kernel fragment updateArmin Kuster2019-05-121-6/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: fix fragment for 5.0 kernelArmin Kuster2019-05-091-6/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto/5.0: add apparmor fragmentsArmin Kuster2019-04-015-0/+37
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: make bbappend version neutralArmin Kuster2019-04-013-5/+9
| | | | | | | | | | | update apparmor configs [v2] Just update configs. leave versions intact. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Fix build issue for apparmor kernel configurationJinliang Li2018-06-111-1/+1
| | | | | | | | | Set the correct path of kernel configuration file in linux-yocto_4.%.bbappend to fix the build issue, which is "Fetcher failure for URL: 'file://apparmor.cfg'. Unable to fetch URL from any source." Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: move to wildcard on bbappendArmin Kuster2018-02-184-0/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: drop dangling dirArmin Kuster2018-02-182-11/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-stable: drop old versions no longer in coreArmin Kuster2018-02-1810-82/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* yocto-linux/4.9: fix typo in filepathArmin Kuster2018-02-181-1/+1
| | | | | | | | fix idea submitted but Derek Betker <derek.betker@ge.com> [Yocto 12134] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto/4.12: update path versionArmin Kuster2017-10-021-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: drop all 4.1 contentMikko Ylinen2017-08-317-20627/+0
| | | | | | | | | | | | linux-yocto_4.1.bb recipe has been removed from oe-core master and that triggers a bitbake error due to orphan bbappends maintained in meta-security. To fix the error, drop linux-yocto_4.1.bbappend plus the patches and the config fragments for it. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: add 4.12 bbappendsArmin Kuster2017-08-314-0/+33
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm: move to a sub layerArmin Kuster2017-05-141-3/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto: add 4.10 kernel supportArmin Kuster2017-04-064-0/+36
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* kernel: mv 4.8 kernel to 4.9Armin Kuster2017-04-066-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* yocto-kernel: add apparmor fragmentsArmin Kuster2017-02-182-0/+14
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack kernel: add smack kernel config fragmentsArmin Kuster2016-11-103-0/+15
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto-4.8: add tpm fragmentsArmin Kuster2016-11-013-0/+20
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Use bb.utils.contains instead of base_contains because it is deprecatedThomas Perrot2016-05-251-4/+4
| | | | | Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto_3.14: remove bbappend from masterThomas Perrot2016-01-171-4/+0
| | | | | | | | Remove recipe for the kernel 3.14 from master branch, to fix a build error. ERROR: No recipes available for: meta-security/recipes-kernel/linux/linux-yocto_3.14.bbappend Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ccs-patch: Add ccs kernel patchesArmin Kuster2015-10-307-0/+20627
| | | | | | add 4.1 kernel support for css Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-20 01:56:48 +0000