mirror of
https://git.yoctoproject.org/poky
synced 2026-02-10 18:53:13 +01:00
kernel-yocto: allow cfg fragments to be specified as required
When .scc files are used, a configuration fragment can be declared as "hardware" (required) or "non-hardware" (optional). By default the configuration audit only warns about hardware options. We can extend that default level of auditing to configuration fragments that are on the SRC_URI or in KERNEL_FEATURES by adding the ability to put a specifier after the fragment. i.e. KERNEL_FEATURES:append = 'hardening.config:required' This is particular useful for fragments that are outside of the kernel-cache (in a layer, in a kernel tree, etc) (From OE-Core rev: 0a84a3dd00543adffdef4fcf5381faab2984541e) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
772c998f84
commit
5ed4e3558e
@@ -271,6 +271,9 @@ do_kernel_metadata() {
|
||||
KERNEL_FEATURES_FINAL=""
|
||||
if [ -n "${KERNEL_FEATURES}" ]; then
|
||||
for feature in ${KERNEL_FEATURES}; do
|
||||
feature_as_specified="$feature"
|
||||
feature="$(echo $feature_as_specified | cut -d: -f1)"
|
||||
feature_specifier="$(echo $feature_as_specified | cut -d: -f2)"
|
||||
feature_found=f
|
||||
for d in $includes; do
|
||||
path_to_check=$(echo $d | sed 's/^-I//')
|
||||
@@ -288,7 +291,7 @@ do_kernel_metadata() {
|
||||
bbfatal_log "Set KERNEL_DANGLING_FEATURES_WARN_ONLY to ignore this issue"
|
||||
fi
|
||||
else
|
||||
KERNEL_FEATURES_FINAL="$KERNEL_FEATURES_FINAL $feature"
|
||||
KERNEL_FEATURES_FINAL="$KERNEL_FEATURES_FINAL $feature_as_specified"
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
Reference in New Issue
Block a user