aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-kernel
AgeCommit message (Collapse)Author
2023-09-25lkrg-module: update to 0.9.7Armin Kuster
LIC_FILES_CHKSUM changed due to year update Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-08-06linux-yocto-rt: Add the bbappend for rt kernelKevin Hao
So that the security features in this layer can be used on the rt kernel. Signed-off-by: Kevin Hao <kexin.hao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-03-20lkrg-modules: update to 0.9.6Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-02-06linux-yocto: drop version from bbappendsMikko Rapeli
These bbappends apply to multiple kernel versions so no need to make them version dependent. Fixes recipe parsing when using meta-security master branch on kirkstone. In our custom layer we set layer compatibility for kirkstone and I understand why meta-security upstream would not want to do that: LAYERSERIES_COMPAT_security-layer += 'kirkstone' LAYERSERIES_COMPAT_parsec-layer += 'kirkstone' LAYERSERIES_COMPAT_tpm-layer += 'kirkstone' While I work towards supporting also yocto master branch and newer releases than kirkstone, I would appreciate if I would not have to branch off layers over minor details like this. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-01-28linux-yocto.bbappend: bump to kernel version 6.xArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-06lkrg-module: update to 0.9.5Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-02lkrg: update to 0.9.4Armin Kuster
drop Makefile fixup patch. Use sed instead LIC_FILES_CHKSUM update do to yr update Signed-off-by: Armin Kuster <akuster808@gmail.com> --- V2] Add LIC_FILES_CHKSUM change reason
2022-07-05lkrg: update to 0.9.3Armin Kuster
refresh patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-07linux-yocto_security.inc: add lkrg kfragsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-07lkrg-module: covert to git fetcherArmin Kuster
This allows to track tip easier. refresh patch Fix LICENSE to match SPDX format Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-02-04lkrg-module: update to 0.9.2Armin Kuster
see https://github.com/lkrg-org/lkrg Support new stable and mainline kernels 5.14 to at least 5.16-rc* Support new longterm kernels 5.4.118+, 4.19.191+, 4.14.233+ update SRC_URI as location changed. refresh patch. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-01meta-security: Convert to new override syntaxArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06linux-yocto-dev: drop bbappendArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06meta-security/recipe-kernel: use sanity checkArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05linux-%_5.%.bbappend: drop recipeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05lkrg-module: update 0.9.1Armin Kuster
LIC_FILES_CHKSUM updated do to yr change and adding new copyrights Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14lkrg-module: Add Linux Kernel Runtime GuardArmin Kuster
For more info see: https://github.com/openwall/lkrg Add to local.conf: IMAGE_INSTALL_append = " kernel-module-lkrg" Need these kconfig options enabled: CONFIG_KALLSYMS_ALL=y CONFIG_JUMP_LABEL=y CONFIG_DEBUG_KERNEL=y To invoke module: sudo insmod {path-to-modules}/p_lkrg.ko kint_enforce=1 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-09linux-%/5.x: Add dm-verity fragment as neededNaveen Saini
Add checks that include dm-verity specific kernel config fragment when dm-verity-img.bbclass is used. Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12linux-yocto(-dev): Add dm-verity fragment as neededniko.mauno@vaisala.com
Add checks that include dm-verity specific kernel config fragment when dm-verity-img.bbclass is used. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-05linux-yocto: update the bbappend to 5.xMingli Yu
As linux-yocto upgraded to 5.x in oe-core, update the bbappend to 5.x to remove the warning: WARNING: No recipes available for: /buildarea/layers/meta-security/recipes-kernel/linux/linux-yocto_4.%.bbappend Signed-off-by: Mingli Yu <mingli.yu@windriver.com> [Droped 4.x part] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-01linux: drop the bbappend for linux v4.x seriesBartosz Golaszewski
v4.19 LTS has been dropped in poky in favor of v5.4. Drop the bbappend from meta-security as right now the build fails. Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28linux-yocto-dev: remove "+"Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-24linux-stable: rename to more generic bbappendArmin Kuster
use wildcards Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-15linux-yocto-dev: update to use kernel cacheArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-15linux-yocto: use 4.19 kernel cache nowArmin Kuster
remove kernel fragments now that they are in the kernel-cache for 4.19 update bbappend accordingly. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-15linux-stable/5.2: add stable bbappendArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-15linux-%: remove kernel fragments now in cacheArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26kernel: Add conditional inclusion of fragments for linux-yocto-devHe Zhe
Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26linux-bbappends: simplifyArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-12smack: kernel fragment updateArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09apparmor: fix fragment for 5.0 kernelArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-01linux-yocto/5.0: add apparmor fragmentsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-01linux-yocto: make bbappend version neutralArmin Kuster
update apparmor configs [v2] Just update configs. leave versions intact. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-11Fix build issue for apparmor kernel configurationJinliang Li
Set the correct path of kernel configuration file in linux-yocto_4.%.bbappend to fix the build issue, which is "Fetcher failure for URL: 'file://apparmor.cfg'. Unable to fetch URL from any source." Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18linux-yocto: move to wildcard on bbappendArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18linux-yocto: drop dangling dirArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18linux-stable: drop old versions no longer in coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18yocto-linux/4.9: fix typo in filepathArmin Kuster
fix idea submitted but Derek Betker <derek.betker@ge.com> [Yocto 12134] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02linux-yocto/4.12: update path versionArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-08-31linux-yocto: drop all 4.1 contentMikko Ylinen
linux-yocto_4.1.bb recipe has been removed from oe-core master and that triggers a bitbake error due to orphan bbappends maintained in meta-security. To fix the error, drop linux-yocto_4.1.bbappend plus the patches and the config fragments for it. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-08-31linux-yocto: add 4.12 bbappendsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-05-14tpm: move to a sub layerArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-04-06linux-yocto: add 4.10 kernel supportArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-04-06kernel: mv 4.8 kernel to 4.9Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18yocto-kernel: add apparmor fragmentsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-10smack kernel: add smack kernel config fragmentsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01linux-yocto-4.8: add tpm fragmentsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-25Use bb.utils.contains instead of base_contains because it is deprecatedThomas Perrot
Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17linux-yocto_3.14: remove bbappend from masterThomas Perrot
Remove recipe for the kernel 3.14 from master branch, to fix a build error. ERROR: No recipes available for: meta-security/recipes-kernel/linux/linux-yocto_3.14.bbappend Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30ccs-patch: Add ccs kernel patchesArmin Kuster
add 4.1 kernel support for css Signed-off-by: Armin Kuster <akuster808@gmail.com>