efi-boot-shim.git/shim.h, branch rolling

Move memory attribute support to its own file.

2025-02-24T20:24:24+00:00

This moves the EFI Memory Attribute Protocol helper functions to their own file, since they're not related to PE things. Signed-off-by: Peter Jones

Move error logging decls out of shim.h

2025-02-24T20:22:28+00:00

This moves decls for errlog.c into errlog.h Signed-off-by: Peter Jones

loader-proto: Add support for loading files from disk to LoadImage()

2025-02-11T15:43:37+00:00

Currently the EFI_SIMPLE_FILE_SYSTEM_PROTOCOL and EFI_LOAD_FILE2_PROTOCOL are supported. Signed-off-by: Mate Kukri

Move some stuff around

2025-02-11T15:43:37+00:00

This moves some things around to help with loader protocol changes: - Move replacements.c to loader-proto.c - likewise with replacements.h - move the SHIM_IMAGE_LOADER decl to loader-proto.h - move the LoadImage / StartImage interface setup to an init function - move shim_load_image() / shim_start_image() to loader-proto.c Signed-off-by: Peter Jones

Implement shim image load protocol

2025-02-11T15:43:37+00:00

Define a new protocol for loading and starting images, encapsulating shim's PE loading facilities and verification/authentication against the same set of certificates that shim_lock::verify() authenticates against. This removes the need for loaders like GRUB to implement their own PE loader in order to be able to invoke loaded images as PE applications, rather than implementing a bespoke OS dependent handover protocol (e.g., invoke Linux via its EFI stub) Signed-off-by: Ard Biesheuvel

Create utils file

2025-02-06T20:13:23+00:00

Move some functions currently used within fallback that will later also be used in shim. Signed-off-by: Eric Snowberg

Move is_removable_media_path() to a shared location.

2025-01-17T19:45:32+00:00

We need to use is_removable_media_path(), and potentially other helpers, from Mok as well as shim. This moves it to a file just for Device Path utility functions to make that simpler. Signed-off-by: Peter Jones

BS Variables for bootmgr revocations

2023-12-05T18:20:00+00:00

This adds support for applying SkuSiPolicy UEFI BS variables. These varaibles are needed for non-dbx based Windows revocations and are described here: https://support.microsoft.com/en-us/topic/kb5027455-guidance-for-blocking-vulnerable-windows-boot-managers-522bb851-0a61-44ad-aa94-ad11119c5e91 Signed-off-by: Jan Setje-Eilers

Further mitigations against CVE-2023-40546 as a class

2023-12-05T18:20:00+00:00

In CVE-2023-40546, an incorrect invocation of LogError() causes a read from the page at address 0, which on newer systems will correctly cause a fault. The immediate fix for this CVE is to fix the invocation so that the error is logged correctly, but there is more that can be done. This patch adds additional checks to ensure that the format specifier on any of these invocations can not be NULL, thereby mitigating this entire class of error from creating a fault. Additionally, most of these checks are done using _Static_assert(), so they should normally be triggered at compile time. Signed-off-by: Peter Jones

Optionally allow to keep shim protocol installed

2023-05-02T17:53:08+00:00

If the ShimRetainProtocol variable is set, avoid uninstalling our protocol. For example, this allows sd-stub in a UKI to use the shim protocol to validate PE binaries, even if it is executed by a second stage, before the kernel is loaded. Ensure that the variable is volatile and for BootServices access. Also delete it on startup, so that we can be sure it was really set by a second stage. Example use case in sd-boot/sd-stub: https://github.com/systemd/systemd/pull/27358 Signed-off-by: Luca Boccassi