...
To enable a protection shield in your Linux kernel image, you need to include recipes-images/images/security/setrootpassword.inc into your image recipe. For an example, please take a look at recipes-images/images/phytec-security-example-image.bb included in ampliphy-secure.
...