mbox series

[meta-security,v2,0/4] Fix some issues due to IMA related changes

Message ID 20230510145125.1067280-1-stefanb@linux.ibm.com
Headers show
Series Fix some issues due to IMA related changes | expand

Message

Stefan Berger May 10, 2023, 2:51 p.m. UTC 
This patchset removes a kernel patch related to overlayfs and IMA appraisal file
change notifictions and a squashfs xattr kernel config option.
Further, it fixes the do_configure function and renames linux-%.bbappend to
linux-yocto%.bbappend to avoid side-effects in build targets unrelated to
the Linux kernel, such as kernel-firmware.

   Stefan

Stefan Berger (4):
  linux: overlayfs: Drop kernel patch resolving a file change
    notification issue
  ima: Drop kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg
  integrity: Fix the do_configure function
  integrity: Rename linux-%.bbappend to linux-yocto%.bbappend

 ...linux-%.bbappend => linux-yocto%.bbappend} |  0
 ...Increment-iversion-upon-file-changes.patch | 42 -------------------
 .../recipes-kernel/linux/linux/ima.cfg        |  1 -
 .../recipes-kernel/linux/linux_ima.inc        |  7 ++--
 4 files changed, 4 insertions(+), 46 deletions(-)
 rename meta-integrity/recipes-kernel/linux/{linux-%.bbappend => linux-yocto%.bbappend} (100%)
 delete mode 100644 meta-integrity/recipes-kernel/linux/linux/0001-ovl-Increment-iversion-upon-file-changes.patch

Comments

akuster808 May 11, 2023, 6:37 p.m. UTC | #1 
On 5/10/23 10:51 AM, Stefan Berger wrote:
> This patchset removes a kernel patch related to overlayfs and IMA appraisal file
> change notifictions and a squashfs xattr kernel config option.
> Further, it fixes the do_configure function and renames linux-%.bbappend to
> linux-yocto%.bbappend to avoid side-effects in build targets unrelated to
> the Linux kernel, such as kernel-firmware.

Thanks for the updates.

Locally this builds fine. OEQA runtime test pass and so does the 
yocto-check-layer. I am currently build on my CI for other Arches. Once 
I get a clean build I will merge to master.


BR,
Armin
>
>     Stefan
>
> Stefan Berger (4):
>    linux: overlayfs: Drop kernel patch resolving a file change
>      notification issue
>    ima: Drop kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg
>    integrity: Fix the do_configure function
>    integrity: Rename linux-%.bbappend to linux-yocto%.bbappend
>
>   ...linux-%.bbappend => linux-yocto%.bbappend} |  0
>   ...Increment-iversion-upon-file-changes.patch | 42 -------------------
>   .../recipes-kernel/linux/linux/ima.cfg        |  1 -
>   .../recipes-kernel/linux/linux_ima.inc        |  7 ++--
>   4 files changed, 4 insertions(+), 46 deletions(-)
>   rename meta-integrity/recipes-kernel/linux/{linux-%.bbappend => linux-yocto%.bbappend} (100%)
>   delete mode 100644 meta-integrity/recipes-kernel/linux/linux/0001-ovl-Increment-iversion-upon-file-changes.patch
>
akuster808 May 13, 2023, 10:09 a.m. UTC | #2 
On 5/10/23 10:51 AM, Stefan Berger wrote:
> This patchset removes a kernel patch related to overlayfs and IMA appraisal file
> change notifictions and a squashfs xattr kernel config option.
> Further, it fixes the do_configure function and renames linux-%.bbappend to
> linux-yocto%.bbappend to avoid side-effects in build targets unrelated to
> the Linux kernel, such as kernel-firmware.
>
>     Stefan

Merged.

thanks
> Stefan Berger (4):
>    linux: overlayfs: Drop kernel patch resolving a file change
>      notification issue
>    ima: Drop kernel config option CONFIG_SQUASHFS_XATTR=y from ima.cfg
>    integrity: Fix the do_configure function
>    integrity: Rename linux-%.bbappend to linux-yocto%.bbappend
>
>   ...linux-%.bbappend => linux-yocto%.bbappend} |  0
>   ...Increment-iversion-upon-file-changes.patch | 42 -------------------
>   .../recipes-kernel/linux/linux/ima.cfg        |  1 -
>   .../recipes-kernel/linux/linux_ima.inc        |  7 ++--
>   4 files changed, 4 insertions(+), 46 deletions(-)
>   rename meta-integrity/recipes-kernel/linux/{linux-%.bbappend => linux-yocto%.bbappend} (100%)
>   delete mode 100644 meta-integrity/recipes-kernel/linux/linux/0001-ovl-Increment-iversion-upon-file-changes.patch
>