matthew/sonic-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
This repository has been archived on 2025-03-20. You can view files and clone it, but cannot push or open issues or pull requests.
6edb5551cb
sonic-buildimage/files/image_config/secureboot/allowlist_paths.md
xumia 76a395cdbf
[secure boot] Support rw files allowlist (#4585) 
* Support rw files allowlist for Sonic Secure Boot
* Improve the performance
* fix bug
* Move the config description into a md file
* Change to use a simple way to remove the blank line
* Support chmod a-x in rw folder
* Change function name
* Change some unnecessary words
2020-06-13 00:10:13 -07:00

408 B
Raw Blame History

Configuration Guide

It is the patterns of the relative paths in /host/image-{{hash}}/rw folder. The patterns will not be used if the Sonic Secure Boot feature is not enabled. The files that are not in the allowlist will be removed when the Sonic System cold reboot.

Example config to add all the files in a folder to allowlist

home/.*

Example config to add a file to allowlist

etc/nsswitch.conf