Hi,
This patch serie is the first one to add the secure boot support
to barebox on efi
For now on this will allow you to execute only properly signed EFI
Application.
And request confirmation for non signed binary other than EFI
Later will add non signed EFI Application execution request at user
request and MoK Support, add other goodies.
Please pull
The following changes since commit 071eb906506d478a3d0b04460625e64edbcd1294:
efi: fix secure and setup mode report (2017-03-04 13:20:38 +0800)
are available in the git repository at:
git://git.jcrosoft.org/barebox.git delivery/efi-sb
for you to fetch changes up to 99e61a9be467fab5b5127b1233c4c4e70288e84c:
efi: enable sercure boot support (2017-03-04 13:20:38 +0800)
----------------------------------------------------------------
Jean-Christophe PLAGNIOL-VILLARD (2):
boot: if we are in secure boot mode
efi: enable sercure boot support
arch/x86/Kconfig | 1 +
commands/go.c | 7 +++++++
common/Kconfig | 8 ++++++++
common/Makefile | 1 +
common/bootm.c | 7 +++++++
common/efi/efi-image.c | 1 +
common/secure_boot.c | 43 +++++++++++++++++++++++++++++++++++++++++++
drivers/efi/efi-device.c | 9 +++++++++
include/bootm.h | 1 +
include/secure_boot.h | 25 +++++++++++++++++++++++++
10 files changed, 103 insertions(+)
create mode 100644 common/secure_boot.c
create mode 100644 include/secure_boot.h
Best Regards,
J.
_______________________________________________
barebox mailing list
barebox@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/barebox
