Add support for GPG signature enforcement on booted

[petitboot] / discover / grub2 / builtins.c

diff --git a/discover/grub2/builtins.c b/discover/grub2/builtins.c
index 8bff7328108479f1b95dbd2d3196cdeada238808..c16b6390225aa403820d65d6dd26841282f51407 100644 (file)
--- a/discover/grub2/builtins.c
+++ b/discover/grub2/builtins.c
@@ -6,7 +6,9 @@
 #include <types/types.h>
 #include <talloc/talloc.h>
 #include <util/util.h>
+#include <url/url.h>
 
+#include "discover/resource.h"
 #include "discover/parser.h"
 #include "grub2.h"
 
@@ -69,6 +71,12 @@ static int builtin_linux(struct grub2_script *script,
                opt->option->boot_args = talloc_asprintf_append(
                                                opt->option->boot_args,
                                                " %s", argv[i]);
+
+       char* args_sigfile_default = talloc_asprintf(opt,
+               "%s.cmdline.sig", argv[1]);
+       opt->args_sig_file = create_grub2_resource(opt, script->ctx->device,
+                                               root, args_sigfile_default);
+       talloc_free(args_sigfile_default);
        return 0;
 }