[PATCH v2] efi/efi_test: lock down /dev/efi_test and require CAP_SYS_ADMIN

otherwise. So this change shouldn't cause any regression to this tool. [0]: https://wiki.ubuntu.com/FirmwareTestSuite/Reference/uefivarinfo Signed-off-by: Javier Martinez Canillas Acked-by: Laszlo Ersek --- Changes in v2: - Also disable /dev/efi_test access when the kernel is locked down

[PATCH] efi/efi_test: require CAP_SYS_ADMIN to open the chardev

checks if the effective user ID is 0 and fails otherwise. So adding the requirement won't cause any regression to this tool. [0]: https://wiki.ubuntu.com/FirmwareTestSuite/Reference/uefivarinfo Signed-off-by: Javier Martinez Canillas --- Hello, We want to enable this driver in the Fedora kernel

Re: [PATCH 1/1] efi/libstub: tpm: zero initialize pointer variables for mixed mode

unsigned long first_entry_addr, last_entry_addr; > size_t log_size, last_entry_size; > efi_bool_t truncated; > - void *tcg2_protocol; > + void *tcg2_protocol = NULL; > > status = efi_call_early(locate_protocol, _guid, NULL, >

Re: Regression from efi: call get_event_log before ExitBootServices

you using? And also would be good to know if it's the same shim version that Jeremy is using. > Regards, > > Hans > Best regards, -- Javier Martinez Canillas Software Engineer - Desktop Hardware Enablement Red Hat -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: [tpmdd-devel] [PATCH v2 2/3] efi: call get_event_log before ExitBootServices

On 09/18/2017 02:11 PM, Thiebaud Weksteen wrote: > On Thu, Sep 14, 2017 at 12:24 PM, Javier Martinez Canillas > <javi...@redhat.com> wrote: >> On 09/11/2017 12:00 PM, Thiebaud Weksteen via tpmdd-devel wrote: [snip] >>> + >>> + if (status != EFI_SUC

Re: [tpmdd-devel] [PATCH v2 2/3] efi: call get_event_log before ExitBootServices

bl_size = sizeof(*tbl) + tbl->size; > + memblock_reserve(efi.tpm_log, tbl_size); > + early_memunmap(tbl, sizeof(*tbl)); > + return 0; Best regards, -- Javier Martinez Canillas Software Engineer - Desktop Hardware Enablement Red Hat -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: [tpmdd-devel] [PATCH v2 0/3] Call GetEventLog before ExitBootServices

and was able to read it: $ cat /sys/class/tpm/tpm0/device/description TPM 2.0 Device $ hexdump /sys/kernel/security/tpm0/binary_bios_measurements | head -n2 000 0008 f504 15a0 1810 bf44 010 63d0 4fdb b8a4 f278 8dc7 c8aa 0014 0000 So please feel free to add: Tested-by: Jav