From 2c8c86f97e9b188807c3bbc2605e578cf28ce82f Mon Sep 17 00:00:00 2001 From: Paul Gortmaker Date: Wed, 10 May 2023 11:04:39 -0400 Subject: dm-verity: ensure people don't ignore the DISTRO_FEATURES warning Some platform creators tend to list a whole bunch of layers by default in conf/bblayers.conf. Without getting into the debate of whether that is a good idea, it can tend to have the effect of people seeing the meta-security DISTRO_FEATURES warning time and time again and becoming essentially numb to it. After having fallen into this trap myself, I figured it was worth the extra mention in the dm-verity doc so there is a better chance of users realizing "hey - this applies to me!". Signed-off-by: Paul Gortmaker Signed-off-by: Armin Kuster --- docs/dm-verity.txt | 2 ++ 1 file changed, 2 insertions(+) (limited to 'docs') diff --git a/docs/dm-verity.txt b/docs/dm-verity.txt index 602a826..ce18395 100644 --- a/docs/dm-verity.txt +++ b/docs/dm-verity.txt @@ -31,6 +31,8 @@ Kernel Configuration Kernel configuration for dm-verity happens automatically via IMAGE_CLASSES which will source features/device-mapper/dm-verity.scc when dm-verity-img is used. [See commit d9feafe991c] +IMPORTANT: As per the top level README, you *must* put security in the +DISTRO_FEATURES, or else you won't get the dm-verity kernel settings. Supported Platforms ------------------- -- cgit v1.2.3-54-g00ecf