blob: 2d1996b1533f0577cf26d2f123dab620bce8e556 [file] [log] [blame]
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +05301Meta-security
2=============
3
Andrew Geisslera1a6aef2021-06-25 14:23:58 -05004The bbappend files for some recipes (e.g. linux-yocto) in this layer need
5to have 'security' in DISTRO_FEATURES to have effect.
6To enable them, add in configuration file the following line.
7
Patrick Williams213cb262021-08-07 19:21:33 -05008 DISTRO_FEATURES:append = " security"
Andrew Geisslera1a6aef2021-06-25 14:23:58 -05009
10If meta-security is included, but security is not enabled as a
11distro feature a warning is printed at parse time:
12
13 You have included the meta-security layer, but
14 'security' has not been enabled in your DISTRO_FEATURES. Some bbappend files
15 and preferred version setting may not take effect.
16
17If you know what you are doing, this warning can be disabled by setting the following
18variable in your configuration:
19
20 SKIP_META_SECURITY_SANITY_CHECK = 1
21
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053022This layer provides security tools, hardening tools for Linux kernels
23and libraries for implementing security mechanisms.
24
25Dependencies
26============
27
28This layer depends on:
29
30 URI: git://git.openembedded.org/openembedded-core
Andrew Geissler78b72792022-06-14 06:47:25 -050031 branch: [same one as checked out for this layer]
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053032
33 URI: git://git.openembedded.org/meta-openembedded/meta-oe
Andrew Geissler78b72792022-06-14 06:47:25 -050034 branch: [same one as checked out for this layer]
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053035
36Adding the security layer to your build
37========================================
38
39In order to use this layer, you need to make the build system aware of
40it.
41
42Assuming the security layer exists at the top-level of your
43yocto build tree, you can add it to the build system by adding the
44location of the security layer to bblayers.conf, along with any
45other layers needed. e.g.:
46
47 BBLAYERS ?= " \
48 /path/to/oe-core/meta \
49 /path/to/meta-openembedded/meta-oe \
Andrew Geisslerf1e44062021-04-15 15:52:46 -050050 /path/to/layer/meta-security "
51
Andrew Geissler78b72792022-06-14 06:47:25 -050052Optional Dynamic layer dependancy
Andrew Geisslerf1e44062021-04-15 15:52:46 -050053======================================
Andrew Geisslerf1e44062021-04-15 15:52:46 -050054
Andrew Geissler78b72792022-06-14 06:47:25 -050055 URI: git://git.openembedded.org/meta-openembedded/meta-oe
Andrew Geisslerf1e44062021-04-15 15:52:46 -050056
Andrew Geissler78b72792022-06-14 06:47:25 -050057 URI: git://git.openembedded.org/meta-openembedded/meta-perl
Andrew Geisslerf1e44062021-04-15 15:52:46 -050058
Andrew Geissler78b72792022-06-14 06:47:25 -050059 URI: git://git.openembedded.org/meta-openembedded/meta-python
60
61 BBLAYERS += "/path/to/layer/meta-openembedded/meta-oe"
62 BBLAYERS += "/path/to/layer/meta-openembedded/meta-perl"
63 BBLAYERS += "/path/to/layer/meta-openembedded/meta-python"
64
65This will activate the dynamic-layer mechanism.
Andrew Geisslerf1e44062021-04-15 15:52:46 -050066
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053067
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053068
69Maintenance
Andrew Geisslerf1e44062021-04-15 15:52:46 -050070======================================
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053071
Brad Bishop5ead1e52019-12-06 10:10:29 -050072Send pull requests, patches, comments or questions to yocto@lists.yoctoproject.org
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053073
74When sending single patches, please using something like:
Brad Bishop5ead1e52019-12-06 10:10:29 -050075'git send-email -1 --to yocto@lists.yoctoproject.org --subject-prefix=meta-security][PATCH'
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053076
Brad Bishop19323692019-04-05 15:28:33 -040077These values can be set as defaults for this repository:
78
Brad Bishop5ead1e52019-12-06 10:10:29 -050079$ git config sendemail.to yocto@lists.yoctoproject.org
Brad Bishop19323692019-04-05 15:28:33 -040080$ git config format.subjectPrefix meta-security][PATCH
81
82Now you can just do 'git send-email origin/master' to send all local patches.
83
Andrew Geissler1fe918a2020-05-15 14:16:47 -050084For pull requests, please use create-pull-request and send-pull-request.
85
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080086Maintainers: Armin Kuster <akuster808@gmail.com>
Richard Marian Thomaiyar14fddef2018-07-13 23:55:56 +053087
88
89License
90=======
91
92All metadata is MIT licensed unless otherwise stated. Source code included
93in tree for individual recipes is under the LICENSE stated in each recipe
94(.bb file) unless otherwise stated.