Re: [PATCH 2/5 v2] efi_loader: Implement EFI variable handling via OP-TEE

2020-05-15 Thread Ilias Apalodimas
On Fri, May 15, 2020 at 01:55:35PM +0200, Heinrich Schuchardt wrote: > On 11.05.20 20:14, Ilias Apalodimas wrote: > > In OP-TEE we can run EDK2's StandAloneMM on a secure partition. > > StandAloneMM is responsible for the UEFI variable support. In > > combination with OP-TEE and it's U-Boot

Re: [PATCH 2/5 v2] efi_loader: Implement EFI variable handling via OP-TEE

2020-05-15 Thread Heinrich Schuchardt
On 11.05.20 20:14, Ilias Apalodimas wrote: > In OP-TEE we can run EDK2's StandAloneMM on a secure partition. > StandAloneMM is responsible for the UEFI variable support. In > combination with OP-TEE and it's U-Boot supplicant, variables are > authenticated/validated in secure world and stored on

Re: [PATCH 2/5 v2] efi_loader: Implement EFI variable handling via OP-TEE

2020-05-13 Thread Ilias Apalodimas
On Wed, May 13, 2020 at 08:14:19AM +0200, Heinrich Schuchardt wrote: > On 5/11/20 8:14 PM, Ilias Apalodimas wrote: > > In OP-TEE we can run EDK2's StandAloneMM on a secure partition. > > StandAloneMM is responsible for the UEFI variable support. In > > + [...] > > + EFI_ENTRY("%p \"%ls\"

Re: [PATCH 2/5 v2] efi_loader: Implement EFI variable handling via OP-TEE

2020-05-13 Thread Heinrich Schuchardt
On 5/11/20 8:14 PM, Ilias Apalodimas wrote: > In OP-TEE we can run EDK2's StandAloneMM on a secure partition. > StandAloneMM is responsible for the UEFI variable support. In > combination with OP-TEE and it's U-Boot supplicant, variables are > authenticated/validated in secure world and stored on

[PATCH 2/5 v2] efi_loader: Implement EFI variable handling via OP-TEE

2020-05-11 Thread Ilias Apalodimas
In OP-TEE we can run EDK2's StandAloneMM on a secure partition. StandAloneMM is responsible for the UEFI variable support. In combination with OP-TEE and it's U-Boot supplicant, variables are authenticated/validated in secure world and stored on an RPMB partition. So let's add a new config option