linux-kernel - Re: [PATCH v2] efi: EFI_DISABLE

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Sat, 28 May 2022 11:39:20 +0200
From:   Ard Biesheuvel <ardb@...nel.org>
To:     Geert Uytterhoeven <geert@...ux-m68k.org>
Cc:     Javier Martinez Canillas <javierm@...hat.com>,
        linux-efi <linux-efi@...r.kernel.org>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH v2] efi: EFI_DISABLE_RUNTIME should depend on EFI

On Sat, 28 May 2022 at 11:24, Ard Biesheuvel <ardb@...nel.org> wrote:
>
> On Tue, 24 May 2022 at 09:37, Geert Uytterhoeven <geert@...ux-m68k.org> wrote:
> >
> > The EFI_DISABLE_RUNTIME config option controls the use of Extensible
> > Firmware Interface (EFI) runtime services, which matters only if EFI
> > support is enabled.
> >
> > Hence add a dependency on EFI, to prevent asking the user about this
> > control knob when configuring a kernel without EFI support.
> >
> > Fixes: a031651ff2144a3d ("efi: Allow to enable EFI runtime services by default on RT")
> > Signed-off-by: Geert Uytterhoeven <geert@...ux-m68k.org>
> > Acked-by: Javier Martinez Canillas <javierm@...hat.com>
> > ---
> > v2:
> >   - Add Acked-by,
> >   - Fix typo s/with/without/.
> > ---
> >  drivers/firmware/efi/Kconfig | 1 +
> >  1 file changed, 1 insertion(+)
> >
>
> Can we just move this option into the menu/endmenu scope that already
> depends on EFI?
>

We can, and there are other candidates as well. So I'll drop this
patch, and send out another one that covers some other options too.

Thanks,
Ard.


> > diff --git a/drivers/firmware/efi/Kconfig b/drivers/firmware/efi/Kconfig
> > index 4720ba98cec312e7..ff6e7bfa8355cfc2 100644
> > --- a/drivers/firmware/efi/Kconfig
> > +++ b/drivers/firmware/efi/Kconfig
> > @@ -299,6 +299,7 @@ config EFI_CUSTOM_SSDT_OVERLAYS
> >
> >  config EFI_DISABLE_RUNTIME
> >         bool "Disable EFI runtime services support by default"
> > +       depends on EFI
> >         default y if PREEMPT_RT
> >         help
> >           Allow to disable the EFI runtime services support by default. This can
> > --
> > 2.25.1
> >