talos-petitboot/lib/file, branch master

lib/log: Switch to pb_log_fn

2018-08-07T01:30:36+00:00

The only functional change should be an additional '/n' to a few log messagees that seemed to be missing it. Signed-off-by: Geoff Levand Signed-off-by: Samuel Mendoza-Jonas

lib/file: remove mkstemp umask in copy_file_secure_dest

2018-05-04T00:26:59+00:00

mkstemp will generate the temp file with permissions 0600 so the umask(0644) is causing the file to have permissions of 0000, making signature files unreadable Signed-off-by: Brett Grandbois Signed-off-by: Samuel Mendoza-Jonas

lib/file: Avoid off-by-one error in array

2018-03-23T00:39:35+00:00

Fixes Coverity defect CIDs 143606, 143610 Signed-off-by: Samuel Mendoza-Jonas

lib/file: Fix errors found by Coverity scan

2016-10-11T03:39:38+00:00

Fix several errors in copy_file_secure_dest() found by Coverity and some minor formatting issues: 143603: Correctly handle mkstemp() return value 143605: Avoid accessing dest_filename[-1] on readlink() error 143606, 143610: Avoid accessing dest_filename[sizeof(dest_filename)] 143607: Fix incorrectly passing sizeof(pointer) to fread() 143608, 143611: Cleanup resources on early exit 143609: Explicitly set umask before calling mkstemp() Signed-off-by: Samuel Mendoza-Jonas

Add support for GPG signature enforcement on booted

2016-08-26T03:23:01+00:00

kernels and related blobs This can be used to implement a form of organization-controlled secure boot, whereby kernels may be loaded from a variety of sources but they will only boot if a valid signature file is found for each component, and only if the signature is listed in the /etc/pb-lockdown file. Signed-off-by: Timothy Pearson Signed-off-by: Samuel Mendoza-Jonas (Minor build fixes and gpgme.m4, comment on secure boot in gpg.c)

lib: Move generic file-handling code to lib/

2014-08-05T02:49:30+00:00

Signed-off-by: Jeremy Kerr