code sign 编译依赖问题修改

Signed-off-by: 团辉 <shituanhui@huawei.com>
This commit is contained in:
团辉
2025-01-06 20:37:33 +08:00
parent 67e427c9c6
commit 5ce3950137
3 changed files with 5 additions and 3 deletions
+1
View File
@@ -9,6 +9,7 @@ obj-$(CONFIG_SECURITY_CODE_SIGN) += \
code_sign_ext.o
ccflags-$(CONFIG_SECURITY_CODE_SIGN) += \
-I$(srctree)/fs/verity \
-I$(srctree)/fs/code_sign \
-I$(srctree)/security/selinux/include \
-I$(srctree)/security/selinux \
+2 -2
View File
@@ -122,7 +122,7 @@ static struct cert_source *find_matched_source(const struct x509_certificate *si
}
void code_sign_verify_certchain(const void *raw_pkcs7, size_t pkcs7_len,
struct cs_info *cs_info, int *ret)
struct fsverity_info *vi, int *ret)
{
struct pkcs7_message *pkcs7;
struct pkcs7_signed_info *sinfo;
@@ -205,7 +205,7 @@ void code_sign_verify_certchain(const void *raw_pkcs7, size_t pkcs7_len,
}
if (cert_chain_depth_without_root == (source->max_path_depth - 1)) {
code_sign_log_info("cert subject and issuer trusted");
set_file_ownerid(cs_info, source->path_type, pkcs7->signed_infos);
set_file_ownerid(&vi->fcs_info, source->path_type, pkcs7->signed_infos);
*ret = source->path_type;
goto exit;
} else {
+2 -1
View File
@@ -7,11 +7,12 @@
#define _VERIFY_CERT_CHAIN_H
#include <linux/xpm_types.h>
#include "fsverity_private.h"
/*
* verify_cert_chain.c
*/
void code_sign_verify_certchain(const void *raw_pkcs7, size_t pkcs7_len,
struct cs_info *cs_info, int *ret);
struct fsverity_info *vi, int *ret);
#endif /* _VERIFY_CERT_CHAIN_H */