c4c3610595
Place a system_extra_cert buffer of configurable size, right after the
system_certificate_list, so that inserted keys can be readily processed by
the existing mechanism. Added script takes a key file and a kernel image
and inserts its contents to the reserved area. The
system_certificate_list_size is also adjusted accordingly.
Call the script as:
scripts/insert-sys-cert -b <vmlinux> -c <certfile>
If vmlinux has no symbol table, supply System.map file with -s flag.
Subsequent runs replace the previously inserted key, instead of appending
the new one.
Signed-off-by: Mehmet Kayaalp <mkayaalp@linux.vnet.ibm.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
16 lines
170 B
Text
16 lines
170 B
Text
#
|
|
# Generated files
|
|
#
|
|
conmakehash
|
|
kallsyms
|
|
pnmtologo
|
|
unifdef
|
|
ihex2fw
|
|
recordmcount
|
|
docproc
|
|
check-lc_ctype
|
|
sortextable
|
|
asn1_compiler
|
|
extract-cert
|
|
sign-file
|
|
insert-sys-cert
|