linux-kernel - [PATCH 0/4] x86/xen/efi: Initialize UEFI secure boot state during dom0 boot

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1515507745-17391-1-git-send-email-daniel.kiper@oracle.com>
Date:   Tue,  9 Jan 2018 15:22:21 +0100
From:   Daniel Kiper <daniel.kiper@...cle.com>
To:     linux-efi@...r.kernel.org, linux-kernel@...r.kernel.org,
        x86@...nel.org, xen-devel@...ts.xenproject.org
Cc:     ard.biesheuvel@...aro.org, boris.ostrovsky@...cle.com,
        hpa@...or.com, jgross@...e.com, konrad.wilk@...cle.com,
        mingo@...hat.com, tglx@...utronix.de
Subject: [PATCH 0/4] x86/xen/efi: Initialize UEFI secure boot state during dom0 boot

Hi,

Initialize UEFI secure boot state during dom0 boot. Otherwise the kernel
may not even know that it runs on secure boot enabled platform.

Daniel

 arch/x86/xen/Makefile                          |    4 +++-
 arch/x86/xen/efi.c                             |   14 +++++++++++++
 drivers/firmware/efi/libstub/secureboot-core.c |   77 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 drivers/firmware/efi/libstub/secureboot.c      |   66 +++++------------------------------------------------------
 4 files changed, 99 insertions(+), 62 deletions(-)

Daniel Kiper (4):
      efi/stub: Extract efi_get_secureboot() to separate file
      x86/xen/efi: Initialize boot_params.secure_boot in xen_efi_init()
      efi: Tweak efi_get_secureboot() and its data section assignment
      efi: Rename efi_get_secureboot() to __efi_get_secureboot() and make it static