[meta-security][PATCH 1/2] meta-tpm linux-yocto-rt: Add the bbappend for rt kernel

[meta-security][PATCH 1/2] meta-tpm linux-yocto-rt: Add the bbappend for rt kernel

[Armin Kuster]

So that the security features in this layer can be used on the
rt kernel.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend

diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend b/meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend
new file mode 100644
index 0000000..e8027ff
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto-rt_%.bbappend
@@ -0,0 +1 @@
+require ${@bb.utils.contains_any('DISTRO_FEATURES', 'tpm tpm2', 'linux-yocto_tpm.inc', '', d)}
-- 
2.34.1

[meta-security][PATCH 2/2] layer: add QA_WARNINGS to all layers

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 conf/layer.conf                | 2 ++
 meta-hardening/conf/layer.conf | 2 ++
 meta-integrity/conf/layer.conf | 2 ++
 meta-parsec/conf/layer.conf    | 2 ++
 meta-tpm/conf/layer.conf       | 2 ++
 5 files changed, 10 insertions(+)

diff --git a/conf/layer.conf b/conf/layer.conf
index 05f678a..a436f97 100644
--- a/conf/layer.conf
+++ b/conf/layer.conf
@@ -27,3 +27,5 @@ BBFILES_DYNAMIC += " \
 INHERIT += "sanity-meta-security"
 
 addpylib ${LAYERDIR}/lib oeqa
+
+WARN_QA:append:security = " patch-status missing-metadata"
diff --git a/meta-hardening/conf/layer.conf b/meta-hardening/conf/layer.conf
index 1dbc537..4bc1cac 100644
--- a/meta-hardening/conf/layer.conf
+++ b/meta-hardening/conf/layer.conf
@@ -11,3 +11,5 @@ BBFILE_PRIORITY_harden-layer = "6"
 LAYERSERIES_COMPAT_harden-layer = "mickledore"
 
 LAYERDEPENDS_harden-layer = "core openembedded-layer"
+
+WARN_QA:append:harden-layer = " patch-status missing-metadata"
diff --git a/meta-integrity/conf/layer.conf b/meta-integrity/conf/layer.conf
index 0622a5f..7a9c1d1 100644
--- a/meta-integrity/conf/layer.conf
+++ b/meta-integrity/conf/layer.conf
@@ -35,3 +35,5 @@ networking-layer:${LAYERDIR}/dynamic-layers/meta-networking/recipes-*/*/*.bbappe
 "
 
 addpylib ${LAYERDIR}/lib oeqa
+
+WARN_QA:append:integrity = " patch-status missing-metadata"
diff --git a/meta-parsec/conf/layer.conf b/meta-parsec/conf/layer.conf
index 7d272a2..b162289 100644
--- a/meta-parsec/conf/layer.conf
+++ b/meta-parsec/conf/layer.conf
@@ -14,3 +14,5 @@ LAYERDEPENDS_parsec-layer = "core clang-layer"
 BBLAYERS_LAYERINDEX_NAME_parsec-layer = "meta-parsec"
 
 addpylib ${LAYERDIR}/lib oeqa
+
+WARN_QA:append:parsec-layer = " patch-status missing-metadata"
diff --git a/meta-tpm/conf/layer.conf b/meta-tpm/conf/layer.conf
index 3b199f7..1f27031 100644
--- a/meta-tpm/conf/layer.conf
+++ b/meta-tpm/conf/layer.conf
@@ -26,3 +26,5 @@ networking-layer:${LAYERDIR}/dynamic-layers/meta-networking/recipes-*/*/*.bbappe
 "
 
 addpylib ${LAYERDIR}/lib oeqa
+
+WARN_QA:append:tmp-layer = " patch-status missing-metadata"
-- 
2.34.1