aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMing Liu <liu.ming50@gmail.com>2021-02-20 13:18:22 +0100
committerArmin Kuster <akuster808@gmail.com>2021-03-04 13:09:03 -0800
commitbf83dca254c70901ac08a818cb0c36e30891f1e4 (patch)
tree7873a2e3067dbee135790c86ada190dc29aff075
parentb263e0a19b2791fd901e5d86482a4d07862cec1c (diff)
downloadmeta-security-bf83dca254c70901ac08a818cb0c36e30891f1e4.zip
meta-security-bf83dca254c70901ac08a818cb0c36e30891f1e4.tar.gz
meta-security-bf83dca254c70901ac08a818cb0c36e30891f1e4.tar.bz2
ima-evm-rootfs.bbclass: avoid generating /etc/fstab for wic
Or else wic will fail without "--no-fstab-update" option. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--meta-integrity/classes/ima-evm-rootfs.bbclass3
1 files changed, 3 insertions, 0 deletions
diff --git a/meta-integrity/classes/ima-evm-rootfs.bbclass b/meta-integrity/classes/ima-evm-rootfs.bbclass
index 4359af0..0acd6e7 100644
--- a/meta-integrity/classes/ima-evm-rootfs.bbclass
+++ b/meta-integrity/classes/ima-evm-rootfs.bbclass
@@ -28,6 +28,9 @@ IMA_EVM_ROOTFS_HASHED ?= ". -depth 0 -false"
# the iversion flags (needed by IMA when allowing writing).
IMA_EVM_ROOTFS_IVERSION ?= ""
+# Avoid re-generating fstab when ima is enabled.
+WIC_CREATE_EXTRA_ARGS_append = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', ' --no-fstab-update', '', d)}"
+
ima_evm_sign_rootfs () {
cd ${IMAGE_ROOTFS}