RE: [meta-security][PATCH] tpm2-tools: make efivar optional

Please also apply to wrynose branch.

Thank you,
  Peter

> -----Original Message-----
> From: Marko, Peter (FT D EU SK BFS1) <[email protected]>
> Sent: Thursday, May 7, 2026 10:39 AM
> To: [email protected]
> Cc: Marko, Peter (FT D EU SK BFS1) <[email protected]>
> Subject: [meta-security][PATCH] tpm2-tools: make efivar optional
> 
> From: Peter Marko <[email protected]>
> 
> Previous commit made this a hard dependency because it's autodetected.
> Instead of that, make it configurable so it can be disabled (roughtly
> equivalent to behavior before that commit).
> 
> Signed-off-by: Peter Marko <[email protected]>
> ---
>  meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb | 5 ++++-
>  1 file changed, 4 insertions(+), 1 deletion(-)
> 
> diff --git a/meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb b/meta-
> tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb
> index fec5e1c..e1a0c5d 100644
> --- a/meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb
> +++ b/meta-tpm/recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb
> @@ -4,7 +4,7 @@ LICENSE = "BSD-3-Clause"
>  LIC_FILES_CHKSUM =
> "file://docs/LICENSE;md5=a846608d090aa64494c45fc147cc12e3"
>  SECTION = "tpm"
> 
> -DEPENDS = "tpm2-tss openssl curl efivar"
> +DEPENDS = "tpm2-tss openssl curl"
> 
>  SRC_URI = "https://github.com/tpm2-
> software/${BPN}/releases/download/${PV}/${BPN}-${PV}.tar.gz"
> 
> @@ -14,4 +14,7 @@ UPSTREAM_CHECK_URI = "https://github.com/tpm2-
> software/${BPN}/releases"
> 
>  inherit autotools pkgconfig bash-completion
> 
> +PACKAGECONGIG ??= "efivar"
> +PACKAGECONFIG[efivar] = "--with-efivar,--without-efivar,efivar"
> +
>  BBCLASSEXTEND = "native nativesdk"