[PATCH v2 15/15] efi/arm64: ignore dtb= when UEFI SecureBoot is enabled

2014-03-13 Thread Leif Lindholm
From: Ard Biesheuvel Loading unauthenticated FDT blobs directly from storage is a security hazard, so this should only be allowed when running with UEFI Secure Boot disabled. Signed-off-by: Ard Biesheuvel Signed-off-by: Leif Lindholm --- drivers/firmware/efi/arm-stub.c| 23

[PATCH v2 15/15] efi/arm64: ignore dtb= when UEFI SecureBoot is enabled

2014-03-13 Thread Leif Lindholm
From: Ard Biesheuvel ard.biesheu...@linaro.org Loading unauthenticated FDT blobs directly from storage is a security hazard, so this should only be allowed when running with UEFI Secure Boot disabled. Signed-off-by: Ard Biesheuvel ard.biesheu...@linaro.org Signed-off-by: Leif Lindholm