efi-boot-shim.git/Makefile, branch 15

Bump version to 15

2018-04-05T18:49:17+00:00

Fix lib/ rebuild-on-change dependencies in the Makefile

2018-04-05T18:49:17+00:00

Signed-off-by: Peter Jones

Make sure fallback.efi gets errlog.o as well

2018-03-12T20:26:07+00:00

Signed-off-by: Peter Jones

shim: Make our variable validation and mirroring table driven.

2018-03-12T20:21:43+00:00

This makes it so shim's idea of Mok variables all resides in one table of data, and we don't need a bunch of nearly identical ad-hoc functions to handle each of them. Signed-off-by: Peter Jones

Move includes around to clean the source tree up a bit.

2018-03-12T20:21:43+00:00

Signed-off-by: Peter Jones

Add "make scan-build" target.

2018-03-12T20:21:43+00:00

Signed-off-by: Peter Jones

Add 'make coverity' target.

2018-03-12T20:21:43+00:00

Signed-off-by: Peter Jones

Split makefiles up a bit

2018-03-12T20:21:43+00:00

Signed-off-by: Peter Jones

Fix failure to boot on systems without a TPM

2018-03-08T16:18:33+00:00

This commit fixes 2 issues with the TPM support code: 1) Remove "REQUIRE_TPM ?=" line from the Makefile, further down the Makefile checks if REQUIRE_TPM is undefined, but the above line sets it to an empty string, which is not the same as undefined. Without this handle_image fails after the tpm_log_pe() call even if REQUIRE_TPM=1 once was not set when building the shim 2) When secure-boot is disabled then shim_verify() would exit with the status of tpm_log_pe(), which on systems with a TPM is an error. Combined with the recent change to always install the shim protocols, this causes grub to refuse to boot any kernel since the verify() call now always fails. This commit fixes this by explicitly setting status = EFI_SUCCESS when secure-boot is disabled. Signed-off-by: Hans de Goede

Add REQUIRE_TPM flag to treat TPM related errors as critical

2018-03-06T19:42:32+00:00

Currently TPM related errors are being silently discarded. Signed-off-by: Tamas K Lengyel