summaryrefslogtreecommitdiff
path: root/include/sbat.h
diff options
context:
space:
mode:
authorPeter Jones <pjones@redhat.com>2021-03-11 17:19:10 -0500
committerJavier Martinez Canillas <javier@dowhile0.org>2021-03-12 10:15:01 +0100
commit76f35c00ef9df3958c5479d74f8d6605c32901ec (patch)
tree2a71e29bb5b00a5ecf1b6874033798276bcf7765 /include/sbat.h
parent076de43a0f871d9e6b6d48e013f01616e4fb1eea (diff)
downloadefi-boot-shim-76f35c00ef9df3958c5479d74f8d6605c32901ec.tar.gz
efi-boot-shim-76f35c00ef9df3958c5479d74f8d6605c32901ec.zip
sbat variable: use UEFI_VAR_NV_BS_RT when we've got ENABLE_SHIM_DEVEL
This makes it so that if you build with ENABLE_SHIM_DEVEL, the SBAT we use is named SBAT_DEVEL instead of SBAT, and it's expected to have EFI_VARIABLE_RUNTIME_ACCESS set. Signed-off-by: Peter Jones <pjones@redhat.com>
Diffstat (limited to 'include/sbat.h')
-rw-r--r--include/sbat.h17
1 files changed, 17 insertions, 0 deletions
diff --git a/include/sbat.h b/include/sbat.h
index 95fa6a56..5db82379 100644
--- a/include/sbat.h
+++ b/include/sbat.h
@@ -13,9 +13,26 @@
#define UEFI_VAR_NV_BS \
(EFI_VARIABLE_NON_VOLATILE | EFI_VARIABLE_BOOTSERVICE_ACCESS)
+#define UEFI_VAR_NV_BS_RT \
+ (EFI_VARIABLE_NON_VOLATILE | EFI_VARIABLE_BOOTSERVICE_ACCESS | \
+ EFI_VARIABLE_RUNTIME_ACCESS)
#define UEFI_VAR_NV_BS_TIMEAUTH \
(UEFI_VAR_NV_BS | EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS)
+#if defined(ENABLE_SHIM_DEVEL)
+#define SBAT_VAR_NAME L"SBAT_DEVEL"
+#define SBAT_VAR_NAME8 "SBAT_DEVEL"
+#define SBAT_RT_VAR_NAME L"SbatRT_DEVEL"
+#define SBAT_RT_VAR_NAME8 "SbatRT_DEVEL"
+#define SBAT_VAR_ATTRS UEFI_VAR_NV_BS_RT
+#else
+#define SBAT_VAR_NAME L"SBAT"
+#define SBAT_VAR_NAME8 "SBAT"
+#define SBAT_RT_VAR_NAME L"SbatRT"
+#define SBAT_RT_VAR_NAME8 "SbatRT"
+#define SBAT_VAR_ATTRS UEFI_VAR_NV_BS
+#endif
+
extern UINTN _sbat, _esbat;
struct sbat_var_entry {