grub2/include/grub/efi
Marco A Benatto 5e280caa65 efi: Move the shim_lock verifier to the GRUB core
Move the shim_lock verifier from its own module into the core image. The
Secure Boot lockdown mechanism has the intent to prevent the load of any
unsigned code or binary when Secure Boot is enabled.

The reason is that GRUB must be able to prevent executing untrusted code
if UEFI Secure Boot is enabled, without depending on external modules.

Signed-off-by: Marco A Benatto <mbenatto@redhat.com>
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2021-03-02 15:54:15 +01:00
..
api.h efi: Make shim_lock GUID and protocol type public 2020-12-11 13:54:23 +01:00
console_control.h 2007-07-22 Yoshinori K. Okuji <okuji@enbug.org> 2007-07-21 23:32:33 +00:00
console.h 2008-09-24 Robert Millan <rmh@aybabtu.com> 2008-09-24 10:17:56 +00:00
disk.h 2007-07-22 Yoshinori K. Okuji <okuji@enbug.org> 2007-07-21 23:32:33 +00:00
edid.h Use EDID on EFI. 2012-03-04 00:48:21 +01:00
efi.h efi: Add a function to read EFI variables with attributes 2020-12-11 13:55:31 +01:00
fdtload.h arm64/efi: move EFI_PAGE definitions to efi/memory.h 2018-02-23 22:42:42 +01:00
graphics_output.h efi/gop: Add support for BLT_ONLY adapters 2020-03-10 21:40:31 +01:00
memory.h arm64/efi: move EFI_PAGE definitions to efi/memory.h 2018-02-23 22:42:42 +01:00
pci.h * include/grub/efi/pci.h: New file to define EFI PCI protocols. 2012-02-27 11:42:23 +01:00
pe32.h PE: Add RISC-V definitions 2019-02-25 11:28:44 +01:00
sb.h efi: Move the shim_lock verifier to the GRUB core 2021-03-02 15:54:15 +01:00
tpm.h efi/tpm: Fix typo in grub_efi_tpm2_protocol struct 2020-09-18 21:23:21 +02:00
uga_draw.h * include/grub/efi/uga_draw.h (GRUB_EFI_UGA_GLT_MAX): Rename to ... 2010-06-11 22:15:35 +01:00