[secure boot] Support rw files allowlist (#4585 )

* Support rw files allowlist for Sonic Secure Boot
* Improve the performance
* fix bug
* Move the config description into a md file
* Change to use a simple way to remove the blank line
* Support chmod a-x in rw folder
* Change function name
* Change some unnecessary words

2020-06-13 00:10:13 -07:00

408 B

Raw Blame History

Configuration Guide

It is the patterns of the relative paths in /host/image-{{hash}}/rw folder. The patterns will not be used if the Sonic Secure Boot feature is not enabled. The files that are not in the allowlist will be removed when the Sonic System cold reboot.

Example config to add all the files in a folder to allowlist

home/.*

Example config to add a file to allowlist

etc/nsswitch.conf

408 B Raw Blame History

Configuration Guide

Example config to add all the files in a folder to allowlist

Example config to add a file to allowlist

408 B

Raw Blame History