diff options
| author | Lennart Poettering <lennart@poettering.net> | 2024-02-28 13:17:03 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2024-02-28 16:17:40 +0100 |
| commit | f4a63ce25f1b672fa2e5b52462ac925bb0027291 (patch) | |
| tree | 54e4ca1a63ad547e098a06756faea8fa7f18b614 /src/dissect | |
| parent | Merge pull request #31444 from bluca/semaphore (diff) | |
| download | systemd-f4a63ce25f1b672fa2e5b52462ac925bb0027291.tar.xz systemd-f4a63ce25f1b672fa2e5b52462ac925bb0027291.zip | |
dissect-image: add flag for explicitly enabling userspace verity signature checking
let's make userspace verity signature checking optional. This adds a
dissection flag to enable the logic and patches through all our users to
enable it by default, thus effectively not changing anything from the
status quo ante. However, know we have a knob to turn this off in
certain scenarios.
Diffstat (limited to 'src/dissect')
| -rw-r--r-- | src/dissect/dissect.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/dissect/dissect.c b/src/dissect/dissect.c index 2766990296..bef7528977 100644 --- a/src/dissect/dissect.c +++ b/src/dissect/dissect.c @@ -79,7 +79,8 @@ static DissectImageFlags arg_flags = DISSECT_IMAGE_USR_NO_ROOT | DISSECT_IMAGE_GROWFS | DISSECT_IMAGE_PIN_PARTITION_DEVICES | - DISSECT_IMAGE_ADD_PARTITION_DEVICES; + DISSECT_IMAGE_ADD_PARTITION_DEVICES | + DISSECT_IMAGE_ALLOW_USERSPACE_VERITY; static VeritySettings arg_verity_settings = VERITY_SETTINGS_DEFAULT; static JsonFormatFlags arg_json_format_flags = JSON_FORMAT_OFF; static PagerFlags arg_pager_flags = 0; |