Marco A Benatto 5e280caa65 efi: Move the shim_lock verifier to the GRUB core ... Move the shim_lock verifier from its own module into the core image. The Secure Boot lockdown mechanism has the intent to prevent the load of any unsigned code or binary when Secure Boot is enabled. The reason is that GRUB must be able to prevent executing untrusted code if UEFI Secure Boot is enabled, without depending on external modules. Signed-off-by: Marco A Benatto <mbenatto@redhat.com> Signed-off-by: Javier Martinez Canillas <javierm@redhat.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>		2021-03-02 15:54:15 +01:00
..
boot	A workaround for clang problem assembling startup_raw.S	2019-04-08 15:22:10 +10:00
bus	calloc: Use calloc() at most places	2020-07-29 16:55:47 +02:00
commands	efi: Move the shim_lock verifier to the GRUB core	2021-03-02 15:54:15 +01:00
disk	luks2: Use grub_log2ull() to calculate log_sector_size and improve readability	2020-12-18 23:15:05 +01:00
efiemu	calloc: Use calloc() at most places	2020-07-29 16:55:47 +02:00
font	font: Do not load more than one NAME section	2020-07-29 16:55:48 +02:00
fs	disk: Rename grub_disk_get_size() to grub_disk_native_sectors()	2020-12-12 01:19:03 +01:00
gdb	i386, x86_64, ppc: fix switch fallthrough cases with GCC7	2017-04-04 19:23:55 +03:00
gettext	verifiers: File type for fine-grained signature-verification controlling	2018-11-09 13:25:31 +01:00
gfxmenu	gfxmenu: Fix double free in load_image()	2020-07-29 16:55:48 +02:00
hello	* grub-core/commands/gptsync.c: Fix typographic quoting.	2012-03-03 13:05:08 +01:00
hook	* grub-core/hook/datehook.c (grub_read_hook_datetime): Small stylistic	2011-11-11 21:03:49 +01:00
io	calloc: Use calloc() at most places	2020-07-29 16:55:47 +02:00
kern	efi: Move the shim_lock verifier to the GRUB core	2021-03-02 15:54:15 +01:00
lib	lzma: Fix compilation error under clang 10	2020-10-30 21:53:00 +01:00
loader	loader/linux: Report the UEFI Secure Boot status to the Linux kernel	2020-12-12 01:19:03 +01:00
mmap	calloc: Use calloc() at most places	2020-07-29 16:55:47 +02:00
net	tftp: Roll-over block counter to prevent data packets timeouts	2020-09-11 15:52:07 +02:00
normal	disk: Rename grub_disk_get_size() to grub_disk_native_sectors()	2020-12-12 01:19:03 +01:00
osdep	disk: Rename grub_disk_get_size() to grub_disk_native_sectors()	2020-12-12 01:19:03 +01:00
partmap	mbr: Warn if MBR gap is small and user uses advanced modules	2020-12-12 01:19:03 +01:00
parttool	* grub-core/net/http.c: Add TRANSLATORS comments.	2012-03-05 16:42:26 +01:00
script	script: Do not allow a delimiter between function name and block start	2020-09-18 22:31:30 +02:00
term	arm/term: Fix linking error due multiple ps2_state definitions	2020-12-11 13:53:54 +01:00
tests	calloc: Use calloc() at most places	2020-07-29 16:55:47 +02:00
video	efi: Return grub_efi_status_t from grub_efi_get_variable()	2020-12-11 13:54:54 +01:00
gdb_grub.in	* grub-core/gdb_grub.in: Fix overflow and wrong field.	2013-10-14 03:40:20 +02:00
genemuinit.sh	use MODULE_FILES for genemuinit* instead of MOD_FILES	2014-01-18 23:15:40 +04:00
genemuinitheader.sh	use MODULE_FILES for genemuinit* instead of MOD_FILES	2014-01-18 23:15:40 +04:00
genmod.sh.in	.mod files: Strip annobin annotations and .eh_frame, and their relocations	2018-03-05 14:08:22 +01:00
genmoddep.awk	enforcing fixup	2017-08-14 16:27:10 +02:00
gensyminfo.sh.in	Fix shebang for termux.	2017-05-03 12:49:31 +02:00
gensymlist.sh	Make 'make check' work on emu.	2013-04-27 02:00:16 +02:00
gentrigtables.c	* grub-core/gentrigtables.c: Make tables const.	2013-03-01 11:15:09 +01:00
gmodule.pl.in	* grub-core/gmodule.pl.in: Accept newer binutils which output	2014-09-21 18:23:23 +02:00
Makefile.am	verifiers: Move verifiers API to kernel image	2021-03-02 15:54:15 +01:00
Makefile.core.def	efi: Move the shim_lock verifier to the GRUB core	2021-03-02 15:54:15 +01:00
modinfo.sh.in	Fix shebang for termux.	2017-05-03 12:49:31 +02:00