Branch: refs/heads/master
  Home:   https://github.com/tianocore/edk2
  Commit: 0d472346dffdbe40aa2ebac9b84bbd6b3ac7889e
      
https://github.com/tianocore/edk2/commit/0d472346dffdbe40aa2ebac9b84bbd6b3ac7889e
  Author: Laszlo Ersek <laszlo.er...@posteo.net>
  Date:   2025-06-10 (Tue, 10 Jun 2025)

  Changed paths:
    M OvmfPkg/Library/PlatformBmPrintScLib/StatusCodeHandler.c

  Log Message:
  -----------
  OvmfPkg/PlatformBmPrintScLib: hint at Secure Boot verification

The UEFI spec 2.11 documents EFI_SECURITY_VIOLATION for both
gBS->LoadImage() and gBS->StartImage() as

> [Image was loaded and an ImageHandle was created with a valid
> EFI_LOADED_IMAGE_PROTOCOL. However,] the current platform policy
> specifies that the image should not be started.

Additionally, the spec documents EFI_ACCESS_DENIED for gBS->LoadImage() as

> Image was not loaded because the platform policy prohibits the image
> from being loaded. NULL is returned in ImageHandle.

When image loading/starting fails under the above conditions (according to
the status code being reported), print a hint about Secure Boot. This
should help users diagnose and fix their Secure Boot configuration.

Updates: 77874ceebb118cd58f518cbf6bcb63f47c993ec0
Fixes: https://github.com/tianocore/edk2/issues/10901
Signed-off-by: Laszlo Ersek <laszlo.er...@posteo.net>



To unsubscribe from these emails, change your notification settings at 
https://github.com/tianocore/edk2/settings/notifications


_______________________________________________
edk2-commits mailing list
edk2-commits@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/edk2-commits

Reply via email to