From patchwork Thu Aug 3 12:34:49 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 28358 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 43DD5C04A6A for ; Thu, 3 Aug 2023 12:34:58 +0000 (UTC) Received: from mail-yw1-f175.google.com (mail-yw1-f175.google.com [209.85.128.175]) by mx.groups.io with SMTP id smtpd.web11.13571.1691066092101930230 for ; Thu, 03 Aug 2023 05:34:52 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20221208 header.b=ailPubL8; spf=pass (domain: gmail.com, ip: 209.85.128.175, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f175.google.com with SMTP id 00721157ae682-583e91891aeso9413597b3.1 for ; Thu, 03 Aug 2023 05:34:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1691066091; x=1691670891; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=WTRIgz0wz4gflfiIxdpBkn1+XZVVo8eiypGlD6uikkg=; b=ailPubL8iXpwpOKlr/IfRzWK+JFS5U3AXD4bkxdGQzAEpXf8j7yU6Ub5AqyirRusbb 6b3zEq2oRMwr9gVTDw9DNYipclZ8h0r3QdEMoFr7xI9JRebTp0y68pgs9X/8ndr5hbgr losXH6BkZO0PtT8PVkZkxQG2V9g6uIhqYToV+biWvs7FFX2GpUr2SuGrq9JIccN7GrCE Rz8QHINRFLE1sE+fz1ln3reUsg9v/rkreHU7mDSlLaLKb60bnjGO5SebLx/PlietsAuM q0Y8j6iw8C1NF6glvvjlINRx/GftXvnpeRYOBu78xJRs+46vHiUVCLu0G4pSD4Ep/s0K bYQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1691066091; x=1691670891; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=WTRIgz0wz4gflfiIxdpBkn1+XZVVo8eiypGlD6uikkg=; b=llds3TWeNpaqUwOrhWBCUVrIugOmWBrlz4wtV3LFVquYFzz48gYXzdVP+vdSxtHs8I QbAT4CErPXTMhiipEmycBJtD0+zxCFnVL0dMoDBXrJzQBtY5Jqjt6RSLVEYjJQoMjhLp bKtcbSTlT6z4/J5Y4i17sZHEiMkqqHN2GRZMZzHT0rUHJfH+TgPILQ8GMpTqlNg6EOe/ VhPz2yImC474g9Cx3p0l9bvOYx8AXKrtu1Z0ScdQooE6l36mayyK4K0FwSd03MlP+DOu Z8Bf9E0TNql5LpJvNsR8ITdQY+DM82+gNdCmCs/jT3MI3SB9IW0XLmrXD+I21ae47FJa AAFg== X-Gm-Message-State: ABy/qLZyhtPQTOkTZ7YIRwWmQ+z6CihqGSXVCIU1/ekkrT08qmVhrhvN fnMznJAR+Eic5B7D92udOKc1x51du6Y= X-Google-Smtp-Source: APBJJlE09TIQgTW6wvCs2CIPp+nUgakY95NKVx85gfhmaOQcHEqfVoxlOox+GS9gLTLq4MaloZNVAg== X-Received: by 2002:a81:6041:0:b0:586:fa6:c5b7 with SMTP id u62-20020a816041000000b005860fa6c5b7mr14070943ywb.15.1691066090986; Thu, 03 Aug 2023 05:34:50 -0700 (PDT) Received: from keaua.caveonetworks.com ([2600:1700:9190:ba10:5c98:9045:2ee5:13b9]) by smtp.gmail.com with ESMTPSA id t14-20020a81830e000000b0057a560a9832sm5328220ywf.1.2023.08.03.05.34.50 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 03 Aug 2023 05:34:50 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 1/2] meta-tpm linux-yocto-rt: Add the bbappend for rt kernel Date: Thu, 3 Aug 2023 08:34:49 -0400 Message-Id: <20230803123450.309537-1-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 03 Aug 2023 12:34:58 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/60703 So that the security features in this layer can be used on the rt kernel. Signed-off-by: Armin Kuster --- meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend | 1 + 1 file changed, 1 insertion(+) create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend b/meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend new file mode 100644 index 0000000..e8027ff --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend @@ -0,0 +1 @@ +require ${@bb.utils.contains_any('DISTRO_FEATURES', 'tpm tpm2', 'linux-yocto_tpm.inc', '', d)} From patchwork Thu Aug 3 12:34:50 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 28357 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 46839C41513 for ; Thu, 3 Aug 2023 12:34:58 +0000 (UTC) Received: from mail-yw1-f178.google.com (mail-yw1-f178.google.com [209.85.128.178]) by mx.groups.io with SMTP id smtpd.web11.13572.1691066092472555971 for ; Thu, 03 Aug 2023 05:34:52 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20221208 header.b=cBuqHxpN; spf=pass (domain: gmail.com, ip: 209.85.128.178, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f178.google.com with SMTP id 00721157ae682-583f036d50bso10013407b3.3 for ; Thu, 03 Aug 2023 05:34:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1691066091; x=1691670891; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=pLl6B6LN+tCB10KsY2FCeZNFqWYUFlupsU6O3khGV4s=; b=cBuqHxpNiJnZy9oMk8fQN1/JZexAkoLKNYE0FGj1vyFaqc2xDFYCAb1NCRexuT5ncj ZaCl7kghlHOPqgeq4oRSwT1/oxg0wcq8xt0O04biDZMQuu1/tzvAXofics5UERRXatNE u5tq7pVVtfO5GUmx57I+m9HuhE7E0fdzz1qwGHzMsq+HbSd5f5oWppE6EEHhDt2G1V4y OX1Lwyhum2fS4pog2Gt/HWC/aAvQO2PoA+dqYjMUt53tyVc93MwL0lfAPiUap4D1C48C Vp9QNtIpZdvl/p3L5hfWXt7bnkG1ZeQZ6/EVpuzqotwh2zhkBzGdiW/wXMSk1TkoceVW TqAQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1691066091; x=1691670891; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=pLl6B6LN+tCB10KsY2FCeZNFqWYUFlupsU6O3khGV4s=; b=FzFh3uYxWnTddWYEBv/8Nb9NqGUtm7kaHUTCJxg6iBEd4xTL7ogeIfBQoYtrBm1aiE +doJ7GuWfHuY5kaELZ7X1sZ3+FJycuyvHl3A4vegWeaZSXbFJozIsX7RA1dFxK/pwtl+ 0yKQaXkzhcqc1VGclxv7wfIKUhM9cXFNAvDmlbGVrPr2BhB0v4vxmrZDb4iSVxwYEYDT QlpeQx+NIc+ZrwhjsFhKlkzRWapqjqejHMDtawGHTnm1Z1FgydhwrHp6UW0nRJD3j+qr RlYD8F8f64B25QkicIrSoB082G9yacijkD/NsD0n91+xpB5dn3Unc25NxGo5bwdPNDHS iKfA== X-Gm-Message-State: ABy/qLbyDocORtx4ua8Sj8KeglbubmbQgWbx32d9+2ZBmEdq6Totp8GQ p7VHUDhUYIzEUFigyDFTzhKLHOm++o4= X-Google-Smtp-Source: APBJJlE6QRFFO6llvHvvDi6Scdr5IWehFiUE9i64LZubC3GQufelr3bYPgb86HCV6gI/uNVeTg5igA== X-Received: by 2002:a81:c313:0:b0:576:f0d6:3d68 with SMTP id r19-20020a81c313000000b00576f0d63d68mr21455731ywk.32.1691066091448; Thu, 03 Aug 2023 05:34:51 -0700 (PDT) Received: from keaua.caveonetworks.com ([2600:1700:9190:ba10:5c98:9045:2ee5:13b9]) by smtp.gmail.com with ESMTPSA id t14-20020a81830e000000b0057a560a9832sm5328220ywf.1.2023.08.03.05.34.51 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 03 Aug 2023 05:34:51 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 2/2] layer: add QA_WARNINGS to all layers Date: Thu, 3 Aug 2023 08:34:50 -0400 Message-Id: <20230803123450.309537-2-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20230803123450.309537-1-akuster808@gmail.com> References: <20230803123450.309537-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 03 Aug 2023 12:34:58 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/60704 Signed-off-by: Armin Kuster --- conf/layer.conf | 2 ++ meta-hardening/conf/layer.conf | 2 ++ meta-integrity/conf/layer.conf | 2 ++ meta-parsec/conf/layer.conf | 2 ++ meta-tpm/conf/layer.conf | 2 ++ 5 files changed, 10 insertions(+) diff --git a/conf/layer.conf b/conf/layer.conf index 05f678a..a436f97 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -27,3 +27,5 @@ BBFILES_DYNAMIC += " \ INHERIT += "sanity-meta-security" addpylib ${LAYERDIR}/lib oeqa + +WARN_QA:append:security = " patch-status missing-metadata" diff --git a/meta-hardening/conf/layer.conf b/meta-hardening/conf/layer.conf index 1dbc537..4bc1cac 100644 --- a/meta-hardening/conf/layer.conf +++ b/meta-hardening/conf/layer.conf @@ -11,3 +11,5 @@ BBFILE_PRIORITY_harden-layer = "6" LAYERSERIES_COMPAT_harden-layer = "mickledore" LAYERDEPENDS_harden-layer = "core openembedded-layer" + +WARN_QA:append:harden-layer = " patch-status missing-metadata" diff --git a/meta-integrity/conf/layer.conf b/meta-integrity/conf/layer.conf index 0622a5f..7a9c1d1 100644 --- a/meta-integrity/conf/layer.conf +++ b/meta-integrity/conf/layer.conf @@ -35,3 +35,5 @@ networking-layer:${LAYERDIR}/dynamic-layers/meta-networking/recipes-*/*/*.bbappe " addpylib ${LAYERDIR}/lib oeqa + +WARN_QA:append:integrity = " patch-status missing-metadata" diff --git a/meta-parsec/conf/layer.conf b/meta-parsec/conf/layer.conf index 7d272a2..b162289 100644 --- a/meta-parsec/conf/layer.conf +++ b/meta-parsec/conf/layer.conf @@ -14,3 +14,5 @@ LAYERDEPENDS_parsec-layer = "core clang-layer" BBLAYERS_LAYERINDEX_NAME_parsec-layer = "meta-parsec" addpylib ${LAYERDIR}/lib oeqa + +WARN_QA:append:parsec-layer = " patch-status missing-metadata" diff --git a/meta-tpm/conf/layer.conf b/meta-tpm/conf/layer.conf index 3b199f7..1f27031 100644 --- a/meta-tpm/conf/layer.conf +++ b/meta-tpm/conf/layer.conf @@ -26,3 +26,5 @@ networking-layer:${LAYERDIR}/dynamic-layers/meta-networking/recipes-*/*/*.bbappe " addpylib ${LAYERDIR}/lib oeqa + +WARN_QA:append:tmp-layer = " patch-status missing-metadata"