Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1528379

[PATCH 0/7] efi: Pass secure boot mode to kernel [ver #3]

Show all headers | View raw

Here's a set of patches that can determine the secure boot state of the
UEFI BIOS and pass that along to the main kernel image.  This involves
generalising ARM's efi_get_secureboot() function and making it mixed-mode
safe.

The patches can be found here also:

	http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/log/?h=efi-secure-boot

at tag:

	efi-secure-boot-20161123-2

Note that the patches are not terminal on the branch.

David
---
Ard Biesheuvel (1):
      efi: use typed function pointers for runtime services table

David Howells (4):
      x86/efi: Allow invocation of arbitrary runtime services
      arm/efi: Allow invocation of arbitrary runtime services
      efi: Add SHIM and image security database GUID definitions
      efi: Get the secure boot status

Josh Boyer (2):
      efi: Disable secure boot if shim is in insecure mode
      efi: Add EFI_SECURE_BOOT bit


 Documentation/x86/zero-page.txt           |    2 +
 arch/arm/include/asm/efi.h                |    1 
 arch/arm64/include/asm/efi.h              |    1 
 arch/x86/boot/compressed/eboot.c          |    3 +
 arch/x86/boot/compressed/head_32.S        |    6 +-
 arch/x86/boot/compressed/head_64.S        |    8 +-
 arch/x86/include/asm/efi.h                |    5 ++
 arch/x86/include/uapi/asm/bootparam.h     |    3 +
 arch/x86/kernel/setup.c                   |    5 ++
 drivers/firmware/efi/libstub/Makefile     |    2 -
 drivers/firmware/efi/libstub/arm-stub.c   |   46 --------------
 drivers/firmware/efi/libstub/secureboot.c |   93 +++++++++++++++++++++++++++++
 include/linux/efi.h                       |   42 +++++++------
 13 files changed, 144 insertions(+), 73 deletions(-)
 create mode 100644 drivers/firmware/efi/libstub/secureboot.c

Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

[PATCH 0/7] efi: Pass secure boot mode to kernel [ver #3] David Howells <dhowells@redhat.com> - 2016-11-23 14:00 +0100
  [PATCH 2/7] x86/efi: Allow invocation of arbitrary runtime services  [ver #3] David Howells <dhowells@redhat.com> - 2016-11-23 14:00 +0100
  [PATCH 4/7] efi: Add SHIM and image security database GUID  definitions [ver #3] David Howells <dhowells@redhat.com> - 2016-11-23 14:00 +0100
  [PATCH 7/7] efi: Add EFI_SECURE_BOOT bit [ver #3] David Howells <dhowells@redhat.com> - 2016-11-23 14:00 +0100
  [PATCH 1/7] efi: use typed function pointers for runtime services  table [ver #3] David Howells <dhowells@redhat.com> - 2016-11-23 14:00 +0100
  [PATCH 6/7] efi: Disable secure boot if shim is in insecure mode  [ver #3] David Howells <dhowells@redhat.com> - 2016-11-23 14:00 +0100
  [PATCH 5/7] efi: Get the secure boot status [ver #3] David Howells <dhowells@redhat.com> - 2016-11-23 14:00 +0100
    Re: [PATCH 5/7] efi: Get the secure boot status [ver #3] James Bottomley <James.Bottomley@HansenPartnership.com> - 2016-11-24 20:50 +0100
  [PATCH 3/7] arm/efi: Allow invocation of arbitrary runtime services  [ver #3] David Howells <dhowells@redhat.com> - 2016-11-23 14:00 +0100

csiph-web