proxmox-mirrors/efi-boot-shim
1
0
Fork 0
mirror of https://git.proxmox.com/git/efi-boot-shim synced 2025-08-16 04:11:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,510 Commits 1 Branch 3 Tags 11 MiB
fd2d9f032c
Commit Graph

1510 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Matthew Garrett
0e054ee1ce Add SHA1 support 
In theory vendors could blacklist binaries with SHA1, so make sure we
calculate and check that hash as well.
 2012-10-11 11:30:41 -04:00
Matthew Garrett
e204505d2d Add menu header 
Add a basic header to the menu to make it clearer what's going on.
Define SHIM_VENDOR in order to override the default.
 2012-10-11 09:55:14 -04:00
Matthew Garrett
c48993f8b0 Add menu header 
Add a basic header to the menu to make it clearer what's going on.
Define SHIM_VENDOR in order to override the default.
 2012-10-11 09:55:14 -04:00
Matthew Garrett
5f292f8f91 Clear screen on exit 2012-10-11 09:45:14 -04:00
Matthew Garrett
f031aeca57 Clear screen on exit 2012-10-11 09:45:14 -04:00
Matthew Garrett
202b5c3e12 Add timeout support 
We should time out if there aren't any keypresses at the top level menu
within a reasonable timeframe.
 2012-10-11 09:44:27 -04:00
Matthew Garrett
bb47e3138e Add timeout support 
We should time out if there aren't any keypresses at the top level menu
within a reasonable timeframe.
 2012-10-11 09:44:27 -04:00
Matthew Garrett
66fe4506fb Fix whitespace 2012-10-11 09:26:16 -04:00
Matthew Garrett
4a6f5c6f87 Fix whitespace 2012-10-11 09:26:16 -04:00
Gary Ching-Pang Lin
dfbe823b53 Remove unnecessary newline 
The newline character shouldn't be present in the menu item string
 2012-10-11 09:24:06 -04:00
Gary Ching-Pang Lin
20b954b004 Remove unnecessary newline 
The newline character shouldn't be present in the menu item string
 2012-10-11 09:24:06 -04:00
Gary Ching-Pang Lin
d6332c078f Pass the size of MokNew to the key enrollment function 
The size of MokNew was missing and it caused crash when enrolling new MOKs
with mokutil
 2012-10-11 09:24:06 -04:00
Gary Ching-Pang Lin
948cedb3c6 Pass the size of MokNew to the key enrollment function 
The size of MokNew was missing and it caused crash when enrolling new MOKs
with mokutil
 2012-10-11 09:24:06 -04:00
Steve Langasek
3cd870ac87 releasing version 0~20120906.bcd0a4e8-0ubuntu4 2012-10-10 15:28:43 -07:00
Steve Langasek
3180a8dd2c debian/patches/shim-before-loadimage: Use direct verification first 
before LoadImage.  Addresses an issue where Lenovo's SecureBoot
implementation pops an error message on any verification failure - avoid
calling LoadImage at all unless we have to.
 2012-10-10 15:26:11 -07:00
Matthew Garrett
4aeb0a9162 Callbacks should return INTN, not UINTN 2012-10-09 09:44:55 -04:00
Matthew Garrett
fb620efef8 Callbacks should return INTN, not UINTN 2012-10-09 09:44:55 -04:00
Matthew Garrett
41f5d6095f Remove unused variable 2012-10-09 09:43:37 -04:00
Matthew Garrett
3839b92b85 Remove unused variable 2012-10-09 09:43:37 -04:00
Matthew Garrett
c9696a1c97 Don't lose the last file in top-level directories 
The filesystem callback was failing to account for the additional menu
item to return to the filesystem list, and so the last file entry in the
root directory would be missing from the list.
 2012-10-09 09:43:08 -04:00
Matthew Garrett
fcb7401ed6 Don't lose the last file in top-level directories 
The filesystem callback was failing to account for the additional menu
item to return to the filesystem list, and so the last file entry in the
root directory would be missing from the list.
 2012-10-09 09:43:08 -04:00
Matthew Garrett
d1c2586c23 Fix filesystem enrollment 
We would always enrol a single key, deleting any existing keys in the
database. Fix that up.
 2012-10-08 17:35:50 -04:00
Matthew Garrett
cfa77df48e Fix filesystem enrollment 
We would always enrol a single key, deleting any existing keys in the
database. Fix that up.
 2012-10-08 17:35:50 -04:00
Matthew Garrett
1e9de96f8a Add an auth argument to store_keys() 
If the user is manually installing keys from a filesystem then we don't need
to ask for the key password.
 2012-10-08 17:34:55 -04:00
Matthew Garrett
27db5b66aa Add an auth argument to store_keys() 
If the user is manually installing keys from a filesystem then we don't need
to ask for the key password.
 2012-10-08 17:34:55 -04:00
Matthew Garrett
cb22de62e7 Add __attribute__ ((packed)) to MokListNode definition 
Packing this lets us use MokListNode with the binary MokList representation.
 2012-10-08 17:33:32 -04:00
Matthew Garrett
ae46cf9d05 Add __attribute__ ((packed)) to MokListNode definition 
Packing this lets us use MokListNode with the binary MokList representation.
 2012-10-08 17:33:32 -04:00
Matthew Garrett
9201fa9ec6 Disable menu freeing 
This looks like it ought to work, but is currently failing. Leaking here
isn't a big deal, so just disable it until I figure out what's wrong.
 2012-10-06 17:52:38 -04:00
Matthew Garrett
19423e7f2b Disable menu freeing 
This looks like it ought to work, but is currently failing. Leaking here
isn't a big deal, so just disable it until I figure out what's wrong.
 2012-10-06 17:52:38 -04:00
Matthew Garrett
a68a0c7b03 Fix menucount 
Menucount wasn't being incremented for the final top level menu, so
the file explorer menu item wasn't appearing.
 2012-10-06 17:39:21 -04:00
Matthew Garrett
ea5bba7315 Fix menucount 
Menucount wasn't being incremented for the final top level menu, so
the file explorer menu item wasn't appearing.
 2012-10-06 17:39:21 -04:00
Matthew Garrett
c9d2ff8c40 Free menus and add statics 
Make sure we free menu items after exiting a menu. Also, add some missing
static annotations.
 2012-10-06 17:30:49 -04:00
Matthew Garrett
13f88088c9 Free menus and add statics 
Make sure we free menu items after exiting a menu. Also, add some missing
static annotations.
 2012-10-06 17:30:49 -04:00
Matthew Garrett
24eace9953 Fix menu items 
Only show the MOK manipulation menu item if MokNew existed
 2012-10-06 17:30:46 -04:00
Matthew Garrett
d2188bbf12 Fix menu items 
Only show the MOK manipulation menu item if MokNew existed
 2012-10-06 17:30:46 -04:00
Matthew Garrett
27a8fc9fd1 Always show the MokManager UI 
If someone explicitly starts MokManager then we want to show the UI
 2012-10-06 17:22:33 -04:00
Matthew Garrett
ba3c876b24 Always show the MokManager UI 
If someone explicitly starts MokManager then we want to show the UI
 2012-10-06 17:22:33 -04:00
Matthew Garrett
8cf182af8b Fall back to MokManager if grub failed to validate 
If we can't verify grub, fall back to MokManager. This permits shipping a
copy of shim and MokManager without distributing a key, letting
distributions provide their own for user installation.
 2012-10-06 17:20:30 -04:00
Matthew Garrett
32b08c73d8 Fall back to MokManager if grub failed to validate 
If we can't verify grub, fall back to MokManager. This permits shipping a
copy of shim and MokManager without distributing a key, letting
distributions provide their own for user installation.
 2012-10-06 17:20:30 -04:00
Matthew Garrett
d991c4a178 Add filesystem browsing and enrollment 
Add a basic menu system and file explorer. This makes it possible for the
user to enrol keys from media from within shim rather than having to boot
an OS first. This would permit vendors to distribute a signed shim without
having to install their own keys first - the keys could be stored on the
install media instead.
 2012-10-05 19:04:57 -04:00
Matthew Garrett
e4889c525b Add filesystem browsing and enrollment 
Add a basic menu system and file explorer. This makes it possible for the
user to enrol keys from media from within shim rather than having to boot
an OS first. This would permit vendors to distribute a signed shim without
having to install their own keys first - the keys could be stored on the
install media instead.
 2012-10-05 19:04:57 -04:00
Steve Langasek
1d8992c51b releasing version 0~20120906.bcd0a4e8-0ubuntu3 2012-10-05 11:21:05 -07:00
Steve Langasek
5ea013bd81 debian/patches/second-stage-path: Chainload grubx64.efi, not 
grub.efi.
 2012-10-05 11:20:56 -07:00
Steve Langasek
be30a8502c releasing version 0~20120906.bcd0a4e8-0ubuntu2 2012-10-04 17:47:08 +00:00
Steve Langasek
63e313d753 Only build the package for amd64; we're not signing an i386 shim at this 
stage so there's no point in building it.
 2012-10-04 17:46:51 +00:00
Steve Langasek
76e675cb49 debian/patches/prototypes: Include missing prototypes, and disable 
use of BIO_new_file.
 2012-10-04 17:46:23 +00:00
Gary Ching-Pang Lin
577029ad75 Don't show the invalid key number 2012-10-04 17:39:59 +08:00
Gary Ching-Pang Lin
0e81abac81 Don't show the invalid key number 2012-10-04 17:39:59 +08:00
Gary Ching-Pang Lin
3ece2b337e Use the same function to get commands and password 2012-10-04 17:39:54 +08:00
Gary Ching-Pang Lin
8bddd68127 Use the same function to get commands and password 2012-10-04 17:39:54 +08:00