Gary Ching-Pang Lin
a903fb1088
Copy the MOK list to a RT variable
...
The RT variable, MokListRT, is a copy of MokList so that the
runtime applications can synchronize the key list without touching
the BS variable.
2012-09-11 17:43:44 +08:00
Gary Ching-Pang Lin
ed2ecf8655
Copy the MOK list to a RT variable
...
The RT variable, MokListRT, is a copy of MokList so that the
runtime applications can synchronize the key list without touching
the BS variable.
2012-09-11 17:43:44 +08:00
Gary Ching-Pang Lin
1342297309
Use the machine owner keys to verify images
2012-09-11 16:39:12 +08:00
Gary Ching-Pang Lin
28c581335e
Use the machine owner keys to verify images
2012-09-11 16:39:12 +08:00
Gary Ching-Pang Lin
333bd97743
Add a separate efi application to manage MOKs
2012-09-11 16:38:29 +08:00
Gary Ching-Pang Lin
481c1e1e76
Add a separate efi application to manage MOKs
2012-09-11 16:38:29 +08:00
Gary Ching-Pang Lin
cec6a0a964
Always try StartImage first
2012-09-11 16:37:02 +08:00
Gary Ching-Pang Lin
1395a9916b
Always try StartImage first
2012-09-11 16:37:02 +08:00
Gary Ching-Pang Lin
e470969e4e
Only launch MokManager when necessary
2012-09-11 16:34:25 +08:00
Gary Ching-Pang Lin
5f00e44f9a
Only launch MokManager when necessary
2012-09-11 16:34:25 +08:00
Gary Ching-Pang Lin
31d3bd054a
Retrieve attributes of variables
...
We have to make sure the machine owner key is stored in a BS
variable.
2012-09-11 16:31:05 +08:00
Gary Ching-Pang Lin
19e957f489
Retrieve attributes of variables
...
We have to make sure the machine owner key is stored in a BS
variable.
2012-09-11 16:31:05 +08:00
Gary Ching-Pang Lin
000c565c06
Merge branch 'master' into mok-prototype3
...
Conflicts:
shim.c
2012-09-07 18:22:34 +08:00
Gary Ching-Pang Lin
1fe0d49c9b
Merge branch 'master' into mok-prototype3
...
Conflicts:
shim.c
2012-09-07 18:22:34 +08:00
Gary Ching-Pang Lin
4b34567dd5
Load MokManager for MOK management
2012-09-07 18:11:45 +08:00
Gary Ching-Pang Lin
0d7c3dbde5
Load MokManager for MOK management
2012-09-07 18:11:45 +08:00
Gary Ching-Pang Lin
822d089e3d
Make the image loading process more generic
2012-09-07 17:43:21 +08:00
Gary Ching-Pang Lin
e235c85af1
Make the image loading process more generic
2012-09-07 17:43:21 +08:00
Peter Jones
13a68a9959
Fix data alignment on vendor_cert so we don't wind up with padding.
2012-09-06 16:43:30 -04:00
Peter Jones
bcd0a4e8df
Fix data alignment on vendor_cert so we don't wind up with padding.
2012-09-06 16:43:30 -04:00
Peter Jones
43eeb538d7
Add some convenience make targets.
...
Adds targets for "test-archive" and "archive"
2012-09-06 12:38:30 -04:00
Peter Jones
07c21a109d
Add some convenience make targets.
...
Adds targets for "test-archive" and "archive"
2012-09-06 12:38:30 -04:00
Peter Jones
7430b90148
Break out of our db checking loop at the appropriate time.
...
The break in check_db_cert is at the wrong level due to a typo in
indentation, and as a result only the last cert in the list can
correctly match. Rectify that.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-09-06 12:13:44 -04:00
Peter Jones
3c2f1d6c3d
Break out of our db checking loop at the appropriate time.
...
The break in check_db_cert is at the wrong level due to a typo in
indentation, and as a result only the last cert in the list can
correctly match. Rectify that.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-09-06 12:13:44 -04:00
Matthew Garrett
ce78d2d250
Use the file size, not the image size field, for verification.
2012-09-06 12:13:44 -04:00
Matthew Garrett
3682a89543
Use the file size, not the image size field, for verification.
2012-09-06 12:13:44 -04:00
Peter Jones
8518b8cc1f
Allow specification of vendor_cert through a build command line option.
...
This allows you to specify the vendor_cert as a file on the command line
during build.
2012-09-06 12:13:44 -04:00
Peter Jones
178b5681b8
Allow specification of vendor_cert through a build command line option.
...
This allows you to specify the vendor_cert as a file on the command line
during build.
2012-09-06 12:13:44 -04:00
Peter Jones
7edb4fedfd
dos2unix PeImage.h
2012-09-06 12:01:43 -04:00
Peter Jones
2295594a47
dos2unix PeImage.h
2012-09-06 12:01:43 -04:00
Steve Langasek
418cad4c06
install the package contents since the upstream makefile doesn't
2012-08-30 04:06:24 +00:00
Steve Langasek
693c308971
Fix up the path to the EFI environment
2012-08-30 03:54:45 +00:00
Steve Langasek
c067243dee
add build-dependency on gnu-efi
2012-08-29 20:24:33 -07:00
Steve Langasek
3e5756512e
Import upstream version 0~20120728.3df9e294
2012-08-29 16:51:10 -07:00
Steve Langasek
c86d9dac75
Initial release.
2012-08-29 16:51:10 -07:00
Matthew Garrett
ffc0e2424b
Add basic documentation
2012-07-28 00:42:43 -04:00
Matthew Garrett
3df9e294b7
Add basic documentation
2012-07-28 00:42:43 -04:00
Matthew Garrett
00ced0c125
Handle slightly stranger device paths
2012-07-13 00:30:22 -04:00
Matthew Garrett
590b34492d
Handle slightly stranger device paths
2012-07-13 00:30:22 -04:00
Matthew Garrett
bc6aaefa2d
Make path generation more sensible
2012-07-11 10:58:15 -04:00
Matthew Garrett
d3ee0bed5e
Make path generation more sensible
2012-07-11 10:58:15 -04:00
Matthew Garrett
5fe882ba74
Make sure ImageBase is set appropriately in the loaded_image protocol
2012-07-11 10:57:46 -04:00
Matthew Garrett
8c173876d1
Make sure ImageBase is set appropriately in the loaded_image protocol
2012-07-11 10:57:46 -04:00
Matthew Garrett
745b7f93ce
Add copyright file
2012-07-09 11:03:12 -04:00
Matthew Garrett
ea863d8471
Add copyright file
2012-07-09 11:03:12 -04:00
Matthew Garrett
8c1d71c7f5
Update TODO
2012-07-09 10:39:14 -04:00
Matthew Garrett
2d60227779
Update TODO
2012-07-09 10:39:14 -04:00
Matthew Garrett
4d8092e7b2
Remove temp file checked in by accident
2012-07-09 10:38:30 -04:00
Matthew Garrett
7f5ccba57e
Remove temp file checked in by accident
2012-07-09 10:38:30 -04:00
Matthew Garrett
37e456be5c
Improve makefile
2012-07-09 10:38:19 -04:00
