Re: [[efi boot control]] efibc: Replace variable set function in notifier call

2019-06-21 Thread Ard Biesheuvel
On Wed, 12 Jun 2019 at 10:20, wrote: > > From: Tian Baofeng > > Replace the variable set function from "efivar_entry_set" to > "efivar_entry_set_safe" in efibc panic notifier. > In safe function parameter "block" will set to false > and will call "efivar_entry_set_nonblocking"to set efi

Re: [PATCH v2] x86/efi: fix a -Wtype-limits compilation warning

2019-06-21 Thread Ard Biesheuvel
On Wed, 19 Jun 2019 at 19:53, Prakhya, Sai Praneeth wrote: > > > Compiling a kernel with W=1 generates this warning, > > > > arch/x86/platform/efi/quirks.c:731:16: warning: comparison of unsigned > > expression >= 0 is always true [-Wtype-limits] > > > > Fixes: 3425d934fc03 ("efi/x86: Handle page

Re: [RFC PATCH] Export Runtime Configuration Interface table to sysfs

2019-06-21 Thread Ard Biesheuvel
(+ Peter) On Mon, 17 Jun 2019 at 12:11, wrote: > > From: Narendra K > > System firmware advertises the address of the 'Runtime > Configuration Interface table version 2 (RCI2)' via > an EFI Configuration Table entry. This code retrieves the RCI2 > table from the address and exports it to sysfs

Re: [RFC PATCH 1/6] efi / ras: CCIX Memory error reporting

2019-06-21 Thread Jonathan Cameron
On Thu, 6 Jun 2019 20:36:49 +0800 Jonathan Cameron wrote: > CCIX defines a number of different error types > (See CCIX spec 1.0) and UEFI 2.8 defines a CPER record to allow > for them to be reported when firmware first handling is in use. > The last part of that record is a copy of the CCIX

Re: [PATCH v2 4/8] x86, efi: Reserve UEFI 2.8 Specific Purpose Memory for dax

2019-06-21 Thread Dan Williams
On Sat, Jun 8, 2019 at 12:20 AM Ard Biesheuvel wrote: > > On Fri, 7 Jun 2019 at 19:34, Dan Williams wrote: > > > > On Fri, Jun 7, 2019 at 8:23 AM Dan Williams > > wrote: > > > > > > On Fri, Jun 7, 2019 at 5:29 AM Ard Biesheuvel > > > wrote: > > [..] > > > > > #ifdef

Re: [PATCH v3 07/10] lib/memregion: Uplevel the pmem "region" ida to a global allocator

2019-06-21 Thread Dan Williams
On Fri, Jun 7, 2019 at 1:23 PM Matthew Wilcox wrote: > > On Fri, Jun 07, 2019 at 12:27:50PM -0700, Dan Williams wrote: > > diff --git a/lib/memregion.c b/lib/memregion.c > > new file mode 100644 > > index ..f6c6a94c7921 > > --- /dev/null > > +++ b/lib/memregion.c > > @@ -0,0 +1,15 @@

[PATCH V34 28/29] efi: Restrict efivar_ssdt_load when the kernel is locked down

2019-06-21 Thread Matthew Garrett
efivar_ssdt_load allows the kernel to import arbitrary ACPI code from an EFI variable, which gives arbitrary code execution in ring 0. Prevent that when the kernel is locked down. Signed-off-by: Matthew Garrett Cc: Ard Biesheuvel Cc: linux-efi@vger.kernel.org --- drivers/firmware/efi/efi.c | 6