summaryrefslogtreecommitdiff
path: root/shim.c
AgeCommit message (Expand)Author
2013-11-19Clarify meaning of insecure_modeMatthew Garrett
2013-11-12shim: improve error messagesAndrew Boie
2013-11-12shim.c: Add support for hashing/relocation of 32-bit binariesMohanraj S
2013-11-12fix verify_mok()Andrew Boie
2013-11-06Fix check logic for SetupMode variable.Peter Jones
2013-10-30Don't free GetVariable() return data without checking the status code.Peter Jones
2013-10-28We should be checking both mok and the system's SB settingsPeter Jones
2013-10-23Revert "additional bounds-checking on section sizes"Peter Jones
2013-10-22Don't reject all binaries without a certificate database.Peter Jones
2013-10-22additional bounds-checking on section sizesKees Cook
2013-10-04Unhook system services as we exit.Peter Jones
2013-10-04Try to actually make debug printing look reasonable.Peter Jones
2013-10-04Do more strict checking on PE Headers.Peter Jones
2013-10-03Improve PE image bounds checking.Peter Jones
2013-10-03Add ident-like blobs to shim.efi for version checking.Peter Jones
2013-10-02Add support for disabling db for verificationJosh Boyer
2013-10-02Fix wrong type on console_error() call.Peter Jones
2013-10-01If we fail to install our protocol, don't continue.Peter Jones
2013-10-01Conditionalize overriding the security policy.Peter Jones
2013-10-01Merge console_control.h and console.hPeter Jones
2013-10-01Make verbose stuff use console_notifyPeter Jones
2013-10-01Include shim's vendor_cert in MokListRTPeter Jones
2013-10-01Harden shim against non-participating bootloaders.Peter Jones
2013-10-01Make vendor_cert/vendor_dbx actually replaceable by an external tool.Peter Jones
2013-09-26integrate security overrideGary Ching-Pang Lin
2013-09-26Merge variable retrieving functionsGary Ching-Pang Lin
2013-09-26Merge signature.h into efiauthenticated.h and guid.hGary Ching-Pang Lin
2013-09-26Free unused memory spaceGary Ching-Pang Lin
2013-09-26Correct the certificate count of the signature listGary Ching-Pang Lin
2013-09-26Since different distros name grub*.efi differently, make it compile-time.Peter Jones
2013-09-26Remove double-separators from the bootpathGary Ching-Pang Lin
2013-09-26Fix the broken bootpathGary Ching-Pang Lin
2013-09-24Pass the right arguments to EFI_PXE_BASE_CODE_TFTP_READ_FILESteve Langasek
2013-09-23Make SHIM_LOCK_GUID a first-class object with a symbol.Peter Jones
2013-09-16Don't print things on the screen by default when everything works.Peter Jones
2013-09-16Don't print that fallback isn't found in should_use_fallback()Peter Jones
2013-06-11Fix some pointer casting issues.Peter Jones
2013-05-15Use the correct define on Open.Peter Jones
2013-05-15Add some error messages when things don't work.Peter Jones
2013-05-15Remove some unnecessary code.Peter Jones
2013-05-15Fix some minor type errors.Peter Jones
2013-04-30Make shim use fallback when appropriate.Peter Jones
2013-04-30Adopt the UEFI shell style LoadOptionsGary Ching-Pang Lin
2013-04-26Get rid of extra label.Peter Jones
2013-04-26Don't put the directory in the file path twice.Peter Jones
2013-04-26UEFI Shell sticks the UCS2 of li->FilePath in li->LoadOptions. Ignore it.Peter Jones
2013-01-03Add support for deleting specific keysGary Ching-Pang Lin
2012-12-10Get the second stage loader from the Load OptionsGary Ching-Pang Lin
2012-11-27Remove debug codeMatthew Garrett
2012-11-26Sign MokManager with a locally-generated keyMatthew Garrett