Tudor Marcu 428d09d003 Move signature verification to mandatory ...

This sets swupd signature verification to mandatory, failing and exiting
for any verify error, though --nosigcheck enables user to bypass all
signature-based security checks.

The signed MoM serves as the top level chain of trust, and it is used to
extend content trust down to the individual file level. When the signature
of the top-level MoM is invalid or cannot be verified for any reason, we
warn and abort the operation.

Passing --nosigcheck will allow this to proceed, explicitly accepting the
unverifiable MoM and outputting a log entry to the Journal. This is not
recommended and unsupported by upstream once the chain of security is broken,
because it may imply update content was or may be installed that was not
generated by the official upstream.

Signed-off-by: Brad T. Peters <brad.t.peters@intel.com>
Signed-off-by: Tudor Marcu <tudor.marcu@intel.com>

2017-01-25 15:00:24 -08:00

..

list.h

Add list_clone for shallow list copy creation

2016-05-10 10:31:00 -07:00

signature.h

Run clang-format on sources

2016-06-27 10:38:27 -07:00

swupd-build-opts.h

Fix style for compliance

2017-01-24 17:27:15 -08:00

swupd-build-variant.h

swupd-build-variant.h: clean up comments for tar defines

2016-11-21 10:59:24 -08:00

swupd-error.h

Fix style for compliance

2017-01-24 17:27:15 -08:00

swupd-internal.h

Add new bundle-list sub-command

2017-01-18 09:52:49 -08:00

swupd.h

Move signature verification to mandatory

2017-01-25 15:00:24 -08:00

xattrs.h

Add options to handle xattr at compile time.

2016-11-08 17:44:02 -08:00