From 4dc646c8cee3774e32011db534cc9f4fb8915fa3 Mon Sep 17 00:00:00 2001 From: Ming Liu Date: Sat, 20 Feb 2021 13:18:20 +0100 Subject: README.md: update according to the refactoring in ima-evm-rootfs.bbclass Signed-off-by: Ming Liu Signed-off-by: Armin Kuster --- meta-integrity/README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'meta-integrity') diff --git a/meta-integrity/README.md b/meta-integrity/README.md index 4607948..5048fba 100644 --- a/meta-integrity/README.md +++ b/meta-integrity/README.md @@ -73,8 +73,10 @@ Adding the layer only enables IMA (see below regarding EVM) during compilation of the Linux kernel. To also activate it when building the image, enable image signing in the local.conf like this: - INHERIT += "ima-evm-rootfs" + IMAGE_CLASSES += "ima-evm-rootfs" IMA_EVM_KEY_DIR = "${INTEGRITY_BASE}/data/debug-keys" + IMA_EVM_PRIVKEY = "${IMA_EVM_KEY_DIR}/privkey_ima.pem" + IMA_EVM_X509 = "${IMA_EVM_KEY_DIR}/x509_ima.der" This uses the default keys provided in the "data" directory of the layer. Because everyone has access to these private keys, such an image -- cgit v1.2.3-54-g00ecf