mirror of
git://git.yoctoproject.org/linux-yocto.git
synced 2025-08-21 16:31:14 +02:00

Enables an IPE policy to be enforced from kernel start, enabling access control based on trust from kernel startup. This is accomplished by transforming an IPE policy indicated by CONFIG_IPE_BOOT_POLICY into a c-string literal that is parsed at kernel startup as an unsigned policy. Signed-off-by: Deven Bowers <deven.desai@linux.microsoft.com> Signed-off-by: Fan Wu <wufan@linux.microsoft.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
6 lines
139 B
Makefile
6 lines
139 B
Makefile
# SPDX-License-Identifier: GPL-2.0
|
|
hostprogs-always-y := polgen
|
|
HOST_EXTRACFLAGS += \
|
|
-I$(srctree)/include \
|
|
-I$(srctree)/include/uapi \
|