Re: [RFC cip-dev][isar-cip-core][PATCH 11/14] layer.conf: use variables to control path of hardening config

On 24.07.26 14:47, Quirin Gylstorff wrote:
> From: Quirin Gylstorff <[email protected]>
> 
> Co-Authored-by: Felix Moessbauer <[email protected]>
> Signed-off-by: Quirin Gylstorff <[email protected]>
> ---
>  conf/layer.conf | 3 +++
>  1 file changed, 3 insertions(+)
> 
> diff --git a/conf/layer.conf b/conf/layer.conf
> index c51c3af..61e25b2 100644
> --- a/conf/layer.conf
> +++ b/conf/layer.conf
> @@ -23,4 +23,7 @@ LAYERSERIES_COMPAT_cip-core = "next"
>  LAYERDIR_cip-core = "${LAYERDIR}"
>  LAYERDIR_cip-core[vardepvalue] = "isar-cip-core"
>  
> +CIP_CIS_HARDENING_CONFIG ??= "${DISTRO}-hardening.config.json"
> +CIP_CIS_HARDENING_KCONFIG ??= "${DISTRO}-hardening.kernel.cfg"
> +
>  IMAGE_CLASSES += "squashfs erofs verity swupdate delta-update qemu-emmc"

...but that such essential defauls should be set first, before allowing
to enabling things in patch 10 already.

Jan

-- 
Siemens AG, Foundational Technologies
Linux Expert Center