Javier Martinez Canillas d298b41f90 mmap: Don't register cutmem and badram commands when lockdown is enforced ... The cutmem and badram commands can be used to remove EFI memory regions and potentially disable the UEFI Secure Boot. Prevent the commands to be registered if the GRUB is locked down. Fixes: CVE-2020-27779 Reported-by: Teddy Reed <teddy.reed@gmail.com> Signed-off-by: Javier Martinez Canillas <javierm@redhat.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>		2021-03-02 15:54:15 +01:00
..
man	Implement syslinux parser.	2013-12-18 05:28:05 +01:00
autoiso.cfg	* docs/autoiso.cfg: New file.	2013-10-27 20:34:24 +01:00
fdl.texi	2008-03-01 Yoshinori K. Okuji <okuji@enbug.org>	2008-03-01 17:27:51 +00:00
font_char_metrics.png	GRUB developper manual based on existing Internals section and	2011-04-03 15:30:28 +02:00
font_char_metrics.txt	GRUB developper manual based on existing Internals section and	2011-04-03 15:30:28 +02:00
grub-dev.texi	kern: Add lockdown support	2021-03-02 15:54:15 +01:00
grub.cfg	* docs/grub.cfg: Update.	2012-05-04 00:30:15 +02:00
grub.texi	mmap: Don't register cutmem and badram commands when lockdown is enforced	2021-03-02 15:54:15 +01:00
Makefile.am	Fix make dist.	2012-02-28 12:58:57 +01:00
mdate-sh	2008-03-01 Yoshinori K. Okuji <okuji@enbug.org>	2008-03-01 17:27:51 +00:00
osdetect.cfg	* docs/osdetect.cfg: Add isolinux config to detected OSes.	2013-12-18 05:34:17 +01:00
texinfo.tex	remove all trailing whitespace	2009-06-10 21:04:23 +00:00