efi-boot-shim.git/include/memattrs.h, branch rolling (mirror of https://github.com/vyos/efi-boot-shim.git)
https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=rolling2025-02-26T00:40:54+00:00HSI: Add decode_hsi_bits() for easier reading of the debug log2025-02-26T00:40:54+00:00Peter Jonespjones@redhat.com2025-02-25T15:41:41+00:00urn:sha1:1baf1efb37e2728104765477b12b70aeef3090af
This changes all the HSI bitfield operations to print a string showing
the change instead of just hex values.
Signed-off-by: Peter Jones <pjones@redhat.com>
shim: add HSIStatus feature2025-02-24T20:24:24+00:00Peter Jonespjones@redhat.com2024-05-15T20:13:13+00:00urn:sha1:848667d0f3a99401d93c93b3af16b55e3fb28cea
hughsie asked me if I can make shim tell userland what kinds of accesses
are allowed to the heap, stack, and allocations on the running platform,
so that these could be reported up through fwupd's Host Security ID
program (see https://fwupd.github.io/libfwupdplugin/hsi.html ).
This adds a new config-only (i.e. not a UEFI variable) variable
generated during boot, "/sys/firmware/efi/mok-variables/HSIStatus",
which tells us those properties as well as if the EFI Memory Attribute
Protocol is present.
Signed-off-by: Peter Jones <pjones@redhat.com>
Move memory attribute support to its own file.2025-02-24T20:24:24+00:00Peter Jonespjones@redhat.com2025-02-20T18:51:29+00:00urn:sha1:589c3f289e05454be23507767439cb9769a2264a
This moves the EFI Memory Attribute Protocol helper functions to their
own file, since they're not related to PE things.
Signed-off-by: Peter Jones <pjones@redhat.com>