[meta-security,15/18] linux-yocto: enable ecryptfs

Message ID	20241220140441.271395-16-mikko.rapeli@linaro.org
State	New
Headers	show Return-Path: <mikko.rapeli@linaro.org> ip: 209.85.208.182, mailfrom: mikko.rapeli@linaro.org) From: Mikko Rapeli <mikko.rapeli@linaro.org> To: yocto-patches@lists.yoctoproject.org Cc: Mikko Rapeli <mikko.rapeli@linaro.org> Subject: [meta-security][PATCH 15/18] linux-yocto: enable ecryptfs Date: Fri, 20 Dec 2024 16:04:38 +0200 Message-ID: <20241220140441.271395-16-mikko.rapeli@linaro.org> In-Reply-To: <20241220140441.271395-1-mikko.rapeli@linaro.org> References: <20241220140441.271395-1-mikko.rapeli@linaro.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	various updates \| expand [meta-security,00/18] various updates [meta-security,01/18] kas-security-base.yml: replace debug-tweaks [meta-security,02/18] kas-security-alt.yml: fix systemd config [meta-security,03/18] chkrootkit: change download from Ubuntu to Debian [meta-security,04/18] apparmor: update from 3.1.3 to 4.0.3 [meta-security,05/18] oeqa runtime clamav.py: use curl if ping fails [meta-security,06/18] libtpm: update from 0.9.6 to 0.10.0 [meta-security,07/18] libtpm: rename to libtpms [meta-security,08/18] libtpms: set CVE_PRODUCT [meta-security,09/18] swtpm: update from 0.8.2 to 0.10.0 [meta-security,10/18] tpm2-tools: add dependency to efivar [meta-security,11/18] u-boot: enable TPM support via "tpm2" in MACHINE_FEATURES [meta-security,12/18] systemd: enable TPM support [meta-security,13/18] systemd-boot: enable TPM support via "tpm2" in DISTRO_FEATURES [meta-security,14/18] harden.conf: exapand debug-tweaks [meta-security,15/18] linux-yocto: enable ecryptfs [meta-security,16/18] ecryptfs-utils: depend on ecryptfs kernel module [meta-security,17/18] oeqa runtime clamav.py: skip test_freshclam_download with systemd [meta-security,18/18] oeqa runtime ima.py: skip without "integrity" in DISTRO_FEATURES

Message ID

20241220140441.271395-16-mikko.rapeli@linaro.org

State

New

Headers

From: Mikko Rapeli <mikko.rapeli@linaro.org>
To: yocto-patches@lists.yoctoproject.org
Cc: Mikko Rapeli <mikko.rapeli@linaro.org>
Subject: [meta-security][PATCH 15/18] linux-yocto: enable ecryptfs
Date: Fri, 20 Dec 2024 16:04:38 +0200
Message-ID: <20241220140441.271395-16-mikko.rapeli@linaro.org>
In-Reply-To: <20241220140441.271395-1-mikko.rapeli@linaro.org>
References: <20241220140441.271395-1-mikko.rapeli@linaro.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

various updates | expand

Commit Message

Mikko Rapeli Dec. 20, 2024, 2:04 p.m. UTC

Build ecryptfs as module. Needed by userspace counterparts in
ecryptfs-utils which are currently failing to start correctly
and thus downgrading systemd boot status from RUNNING to DEGRADED.
Fix is to build and install the kernel module.

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
---
 recipes-kernel/linux/linux-yocto_security.inc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/recipes-kernel/linux/linux-yocto_security.inc b/recipes-kernel/linux/linux-yocto_security.inc
index b79af80..3a2ff96 100644
--- a/recipes-kernel/linux/linux-yocto_security.inc
+++ b/recipes-kernel/linux/linux-yocto_security.inc
@@ -3,4 +3,5 @@  FILESEXTRAPATHS:prepend := "${THISDIR}/files:"
 KERNEL_FEATURES:append = " ${@bb.utils.contains("DISTRO_FEATURES", "apparmor", " features/apparmor/apparmor.scc", "" ,d)}"
 KERNEL_FEATURES:append = " ${@bb.utils.contains("DISTRO_FEATURES", "smack", " features/smack/smack.scc", "" ,d)}"
 KERNEL_FEATURES:append = " ${@bb.utils.contains("IMAGE_CLASSES", "dm-verity-img", " features/device-mapper/dm-verity.scc", "" ,d)}"
+KERNEL_FEATURES:append = " features/ecryptfs/ecryptfs.scc"
 SRC_URI += " ${@bb.utils.contains("DISTRO_FEATURES", "lkrg", "file://lkrg.scc", "" ,d)}"

[meta-security,15/18] linux-yocto: enable ecryptfs

Commit Message

Patch