| .. SPDX-License-Identifier: CC-BY-SA-2.0-UK |
| |
| ************ |
| Introduction |
| ************ |
| |
| Welcome to the Yocto Project Security Manual. This manual provides relevant |
| procedures for dealing with security-related tasks supported in the |
| Yocto Project environment. This manual groups related procedures into |
| higher-level sections. Procedures can consist of high-level steps or low-level |
| steps depending on the topic. |
| |
| This manual provides the following: |
| |
| - Procedures that help you secure an image using features supported by the |
| Yocto Project; for example, making a root filesystem read-only. |
| |
| - Procedures related to processes outside of the target images; for example, how |
| to deal with vulnerabilities. |
| |
| This manual does not provide the following: |
| |
| - Procedures for security features implemented outside of |
| :term:`OpenEmbedded-Core (OE-Core)`. |
| |
| - Documentation for the security mechanisms themselves, which can often be found |
| in the documentation of the feature itself. This manual focuses on how to |
| integrate those security mechanisms within the Yocto Project. |
