dissect-image: load embedded verity signature info from image

This adds support for actually using embedded signature data from partitions.
2021-09-28 17:02:54 +02:00
parent 8ee9615e10
commit 88b3300fdc
6 changed files with 167 additions and 0 deletions
@@ -5710,6 +5710,13 @@ static int run(int argc, char *argv[]) {
                if (r < 0)
                        goto finish;

+                r = dissected_image_load_verity_sig_partition(
+                                dissected_image,
+                                loop->fd,
+                                &arg_verity_settings);
+                if (r < 0)
+                        goto finish;
+
                if (dissected_image->has_verity && !arg_verity_settings.root_hash && !dissected_image->has_verity_sig)
                        log_notice("Note: image %s contains verity information, but no root hash specified and no embedded "
                                   "root hash signature found! Proceeding without integrity checking.", arg_image);