summaryrefslogtreecommitdiff
path: root/macros.in
diff options
context:
space:
mode:
authorJes Sorensen <jsorensen@fb.com>2020-04-20 11:11:25 -0400
committerPanu Matilainen <pmatilai@redhat.com>2020-09-04 13:22:38 +0300
commit9b3a65ef06ad9868b9dba667bef1878453ceca89 (patch)
tree6d402b00b154ff5ff4e531dc4742fa22d99d98e7 /macros.in
parent7e528e66506e48f01acfdc1101591f8084742f2a (diff)
downloadrpm-9b3a65ef06ad9868b9dba667bef1878453ceca89.tar.gz
plugins/fsverity: Install fsverity signatures
This plugin installs fsverity signatures for regular files, when a signature is found in the RPM. It tries to enable them unconditionally, but fails gracefully if fsverity isn't supported or enabled. Signed-off-by: Jes Sorensen <jsorensen@fb.com>
Diffstat (limited to 'macros.in')
-rw-r--r--macros.in4
1 files changed, 4 insertions, 0 deletions
diff --git a/macros.in b/macros.in
index 565f6be6f..85b327f25 100644
--- a/macros.in
+++ b/macros.in
@@ -734,6 +734,9 @@ package or when debugging this package.\
# a wrong or missing signature.
#%_ima_sign_config_files 0
+# Set to 1 to have fsverity signatures written for %config files.
+#%_fsverity_sign_config_files 0
+
#
# Default output format string for rpm -qa
#
@@ -1173,6 +1176,7 @@ package or when debugging this package.\
%__transaction_selinux %{__plugindir}/selinux.so
%__transaction_syslog %{__plugindir}/syslog.so
%__transaction_ima %{__plugindir}/ima.so
+%__transaction_fsverity %{__plugindir}/fsverity.so
%__transaction_prioreset %{__plugindir}/prioreset.so
%__transaction_audit %{__plugindir}/audit.so