proxmox-mirrors/grub2
1
0
Fork 0
mirror of https://git.proxmox.com/git/grub2 synced 2025-11-06 18:54:33 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
a0b08bad3d
grub2/grub-core/loader
History
Javier Martinez Canillas b1e1dd4711 loader/xnu: Don't allow loading extension and packages when locked down 
The shim_lock verifier validates the XNU kernels but no its extensions
and packages. Prevent these to be loaded when the GRUB is locked down.

Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

Patch-Name: 2021-02-security/012-loader-xnu-Don-t-allow-loading-extension-and-packages-when-locked-down.patch
2021-02-27 14:46:20 +00:00
..
arm commands: Restrict commands that can load BIOS or DT blobs when locked down 2021-02-27 14:46:18 +00:00
arm64 efi: Rename armxx to arch 2019-02-25 11:28:44 +01:00
efi commands: Restrict commands that can load BIOS or DT blobs when locked down 2021-02-27 14:46:18 +00:00
i386 efi: fix some malformed device path arithmetic errors. 2020-07-24 22:44:16 +01:00
ia64/efi verifiers: IA-64 fallout cleanup 2019-03-20 11:38:28 +01:00
mips relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow 2020-07-24 22:43:30 +01:00
powerpc/ieee1275 verifiers: PowerPC fallout cleanup 2019-03-20 11:38:28 +01:00
riscv RISC-V: Add Linux load logic 2019-02-25 11:33:06 +01:00
sparc64/ieee1275 arm-uboot, ia64, sparc64: Fix up grub_file_open() calls 2018-11-16 14:42:51 +01:00
aout.c Implement automatic module license checking according to new GNU 2011-04-11 23:01:51 +02:00
linux.c linux: Fix integer overflows in initrd size handling 2020-07-26 23:38:07 +01:00
lzss.c Add LZSS Mach-O support (needed for new xnu kernelcache). 2012-02-29 13:26:13 +01:00
macho32.c * grub-core/loader/machoXX.c: Fix compilation on non-i386. 2013-12-17 22:44:46 +01:00
macho64.c * grub-core/loader/machoXX.c: Fix compilation on non-i386. 2013-12-17 22:44:46 +01:00
macho.c calloc: Use calloc() at most places 2020-07-24 22:42:16 +01:00
machoXX.c Simplify few strings. 2013-05-07 11:44:15 +02:00
multiboot_elfxx.c relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow 2020-07-24 22:43:30 +01:00
multiboot_mbi2.c relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow 2020-07-24 22:43:30 +01:00
multiboot.c relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow 2020-07-24 22:43:30 +01:00
xnu_resume.c relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow 2020-07-24 22:43:30 +01:00
xnu.c loader/xnu: Don't allow loading extension and packages when locked down 2021-02-27 14:46:20 +00:00