Modify the recovery and trustfence initramfs scripts to be able to encrypt any partition on the internal storage media, not just the rootfs. To implement this functionality, add a new recovery command called 'encrypt_partitions'. When used, this command must contain a comma-separated list of the partitions that are to be encrypted by the end of the recovery process, including partitions that were already encrypted beforehand. Any partition that isn't in the list will be unencrypted. If the command is absent, no changes will be made, but it's possible to pass an empty command to unencrypt all partitions. Include a blacklist to avoid encrypting partitions that shouldn't be encrypted, such as partitions that need to be accessed by the ROM code/U-Boot or partitions that contain encryption keys. While at it, remove unnecessary "get_kernel_version" function from the script. https://onedigi.atlassian.net/browse/DEL-7174 Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com> |
||
|---|---|---|
| .. | ||
| classes | ||
| conf | ||
| dynamic-layers/webkit | ||
| recipes-aws | ||
| recipes-connectivity | ||
| recipes-core | ||
| recipes-devtools | ||
| recipes-digi | ||
| recipes-extended | ||
| recipes-gnome | ||
| recipes-graphics | ||
| recipes-multimedia | ||
| recipes-qt | ||
| recipes-sato | ||
| recipes-security/ml-security | ||
| recipes-support | ||
| DIGI_EULA | ||
| DIGI_OPEN_EULA | ||
| README | ||
README
OpenEmbedded/Yocto Digi Embedded Linux layer ============================================ This layer provides the Digi Embedded Linux distribution images. This layer depends on: git://git.yoctoproject.org/poky.git git://git.openembedded.org/meta-openembedded.git git://git.yoctoproject.org/meta-freescale.git git://github.com/Freescale/meta-fsl-demos.git Digi's license agreements ------------------------- All software is covered by Digi's general EULA and Digi's Open Source EULA. To have the right to use the software in your images you need to read and accept both EULAs at the DIGI_EULA and DIGI_OPEN_EULA files. NXP Semiconductors' software license agreement ---------------------------------------------- Some platforms depends on libraries and packages that are covered by NXP Semiconductors' EULA. To have the right to use those binaries in your images you need to read and accept the EULA file in meta-freescale Yocto layer. Support ------- This layer is provided 'as is' with no guarantee. However, some support may be available from tech.support@digi.com