From c4ecc0a40d2bdfe85ee22a614bdd384c27066746 Mon Sep 17 00:00:00 2001
From: Zhou Shuiqing <zhoushuiqing2@huawei.com>
Date: Fri, 15 Sep 2023 18:41:57 +0800
Subject: [PATCH] ima: fix the PGP certificate failure to load into the kernel

euleros inclusion
category: feature
bugzilla: https://gitee.com/openeuler/kernel/issues/I81RYU
CVE: NA

-------------------------------------------------

This patch is to fix the PGP certificate failure to load into the kernel,
PGP certificates are used to verify the IMA digest list.

Signed-off-by: Zhou Shuiqing <zhoushuiqing2@huawei.com>
---
 certs/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/certs/Makefile b/certs/Makefile
index ab6da6f4e953..49f8101ccad2 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -67,7 +67,7 @@ $(obj)/system_certificates.o: $(obj)/signing_key.x509
 
 ifdef CONFIG_PGP_PRELOAD_PUBLIC_KEYS
 ifeq ($(shell ls $(srctree)/certs/pubring.gpg 2> /dev/null), $(srctree)/certs/pubring.gpg)
-system_certificates.o += -DHAVE_PUBRING_GPG
+AFLAGS_system_certificates.o += -DHAVE_PUBRING_GPG
 $(obj)/system_certificates.o: $(srctree)/certs/pubring.gpg
 endif
 endif
-- 
Gitee