mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-08-02 20:40:06 +00:00
5f0a358b63
In some rare corner cases, it's useful to add a blacklist of things that were allowed by a copy of shim that was never signed by the UEFI signing service. In these cases it's okay for them to go into a local dbx, rather than taking up precious flash. Signed-off-by: Peter Jones <pjones@redhat.com>
33 lines
557 B
ArmAsm
33 lines
557 B
ArmAsm
#if defined(VENDOR_DBX_FILE)
|
|
.globl vendor_dbx_size
|
|
.data
|
|
.align 1
|
|
.type vendor_dbx_size, @object
|
|
.size vendor_dbx_size, 4
|
|
vendor_dbx_size:
|
|
.long .L0 - vendor_dbx
|
|
.globl vendor_dbx
|
|
.data
|
|
.align 1
|
|
.type vendor_dbx, @object
|
|
.size vendor_dbx_size, vendor_dbx_size-vendor_dbx
|
|
vendor_dbx:
|
|
.incbin VENDOR_DBX_FILE
|
|
.L0:
|
|
#else
|
|
.globl vendor_dbx
|
|
.bss
|
|
.type vendor_dbx, @object
|
|
.size vendor_dbx, 1
|
|
vendor_dbx:
|
|
.zero 1
|
|
|
|
.globl vendor_dbx_size
|
|
.data
|
|
.align 4
|
|
.type vendor_dbx_size, @object
|
|
.size vendor_dbx_size, 4
|
|
vendor_dbx_size:
|
|
.long 1
|
|
#endif
|