Add public key (secure-boot-public-key.pem) 88/278388/4 accepted/tizen/unified/20220721.135030 submit/tizen/20220721.040936
authorSangYoun Kwak <sy.kwak@samsung.com>
Wed, 20 Jul 2022 05:05:54 +0000 (14:05 +0900)
committerSangYoun Kwak <sy.kwak@samsung.com>
Wed, 20 Jul 2022 05:22:21 +0000 (14:22 +0900)
Change-Id: Ie80cd31fec981bf43df21f79ef711dbb9583bae8
Signed-off-by: SangYoun Kwak <sy.kwak@samsung.com>
src/initrd-recovery/mkinitrd-recovery.sh.in

index 6b69f404fe11fbda9ec76330668e39e785e6187c..4b9f96d6d3853234702b7b3c14c52f3b95a4625f 100755 (executable)
@@ -32,6 +32,7 @@ else
 fi
 
 DMVERITY_ROOTFS_VERIFY_HASH="/usr/lib/initrd/bin/dmverity-rootfs-verify-hash.sh"
+SECURE_BOOT_PUBLIC_KEY="/usr/lib/initrd/etc/secure-boot-public-key.pem"
 
 INITRD_ROOT="/mnt/initrd-recovery"
 HAL_LIST="${INITRD_ROOT}/hal/.hal_list"
@@ -276,7 +277,12 @@ make_initrd_recovery() {
     symlink_objects $OBJECTS_SYMLINK
     mvwithlib_objects $OBJECTS_MVWITHLIB
 
-    "$CP" "$DMVERITY_ROOTFS_VERIFY_HASH" "$INITRD_ROOT/usr/bin/dmverity-rootfs-verify-hash.sh"
+    if [ -x "$DMVERITY_ROOTFS_VERIFY_HASH" ]; then
+           "$CP" "$DMVERITY_ROOTFS_VERIFY_HASH" "$INITRD_ROOT/usr/bin/dmverity-rootfs-verify-hash.sh"
+    fi
+    if [ -e "$SECURE_BOOT_PUBLIC_KEY" ]; then
+           "$CP" "$SECURE_BOOT_PUBLIC_KEY" "$INITRD_ROOT/etc/secure-boot-public-key.pem"
+    fi
 
     /usr/sbin/ldconfig -r $INITRD_ROOT
 }