build_image: fix hash perms & arm image path

build_kernel_image.sh

 #!/bin/bash
 
 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # Helper script that generates the signed kernel image
 
 . "$(dirname "$0")/common.sh"
 
@@ skipping 60 matching lines @@
     error "Root file system blocks are not 4k!"
   fi
 
   info "Generating root fs hash tree."
   # Runs as sudo in case the image is a block device.
   table=$(sudo verity create ${FLAGS_vboot_tree_depth} \
                         ${FLAGS_vboot_hash_alg} \
                         ${FLAGS_rootfs_image} \
                         ${root_fs_blocks} \
                         ${FLAGS_rootfs_hash})
+  if [[ -f "${FLAGS_rootfs_hash}" ]]; then
+    sudo chmod a+r "${FLAGS_rootfs_hash}"
+  fi
   # Don't claim the root device unless the root= flag is pointed to
   # the verified boot device.  Doing so will claim /dev/sdDP out from
   # under the system.
   if [[ ${FLAGS_root} = "/dev/dm-0" ]]; then
     table=${table//HASH_DEV/\/dev\/sd%D%P}
     table=${table//ROOT_DEV/\/dev\/sd%D%P}
   fi
   vboot_args="dm=\"${table}\""
   info "dm-verity configuration: ${vboot_args}"
 fi
@@ skipping 117 matching lines @@
   info "Cleaning up temporary files: ${WORK}"
   rm ${WORK}
   rmdir ${FLAGS_working_dir}
 fi
 
 info "Kernel partition image emitted: ${FLAGS_to}"
 
 if [[ -f ${FLAGS_rootfs_hash} ]]; then
   info "Root filesystem hash emitted: ${FLAGS_rootfs_hash}"
 fi