meta-facebook : Add Whitelist as IPMI restriction mode by default
Added IPMI restriction mode as Whitelist by default mode for all
the hosts in machine layer for Facebook YosemiteV2 platform.
TESTED : Built Facebook YosemiteV2 images and loaded on the target
hardware. Verified restriction mode as whitelist by default.
Signed-off-by: Kumar Thangavel <thangavel.k@hcl.com>
Change-Id: Ib3e98615a2ec80d241f1677ac1838de5a837c6d0
diff --git a/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native.bbappend b/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native.bbappend
index 68c1d6c..61b5ae3 100644
--- a/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native.bbappend
+++ b/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native.bbappend
@@ -1,4 +1,7 @@
FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
-SRC_URI += "file://fb_host_settings.override.yml"
+SRC_URI:append = " file://fb_host_settings.override.yml"
+SRC_URI:append:fb-compute = " file://restrictionmode-host-settings.override.yml"
+
SETTINGS_HOST_TEMPLATES:append = " fb_host_settings.override.yml"
+SETTINGS_HOST_TEMPLATES:append:fb-compute = " restrictionmode-host-settings.override.yml"
diff --git a/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native/fb-compute/restrictionmode-host-settings.override.yml b/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native/fb-compute/restrictionmode-host-settings.override.yml
new file mode 100644
index 0000000..5b52a69
--- /dev/null
+++ b/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native/fb-compute/restrictionmode-host-settings.override.yml
@@ -0,0 +1,5 @@
+/xyz/openbmc_project/control/host{}/restriction_mode:
+ - Interface: xyz.openbmc_project.Control.Security.RestrictionMode
+ Properties:
+ RestrictionMode:
+ Default: RestrictionMode::Modes::Whitelist
diff --git a/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager/restrictionmode-ocpdebugcard-settings.override.yml b/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager/restrictionmode-ocpdebugcard-settings.override.yml
new file mode 100644
index 0000000..1e2c3a2
--- /dev/null
+++ b/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager/restrictionmode-ocpdebugcard-settings.override.yml
@@ -0,0 +1,5 @@
+/xyz/openbmc_project/control/ocp_debug_card/restriction_mode:
+ - Interface: xyz.openbmc_project.Control.Security.RestrictionMode
+ Properties:
+ RestrictionMode:
+ Default: RestrictionMode::Modes::Whitelist
diff --git a/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager_%.bbappend b/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager_%.bbappend
new file mode 100644
index 0000000..e0e2f84
--- /dev/null
+++ b/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager_%.bbappend
@@ -0,0 +1,3 @@
+FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
+
+SRC_URI:append = " file://restrictionmode-ocpdebugcard-settings.override.yml"