efi-boot-shim.git - (mirror of https://github.com/vyos/efi-boot-shim.git)

Age	Commit message (Expand)	Author
2015-04-13	Align the sections we're loading, and check for validity /after/ discarding.	Peter Jones
2014-10-02	Don't verify images with the empty build key	Gary Ching-Pang Lin
2014-10-02	Don't append an empty cert list to MokListRT if vendor_cert_size is 0.	Peter Jones
2014-09-30	Actually find the relocations correctly and process them that way.	Peter Jones
2014-09-21	Fix our "in_protocol" printing.	Peter Jones
2014-09-21	Don't call AuthenticodeVerify if vendor_cert_size is 0.	Peter Jones
2014-09-21	Validate computed hash bases/hash sizes more thoroughly.	Peter Jones
2014-09-21	Make 64-on-32 maybe work on x86_64.	Peter Jones
2014-09-19	Actually refer to the base relocation table of our loaded image.	Peter Jones
2014-08-27	Make sure we don't try to load a binary from a different arch.	Peter Jones
2014-08-27	Handle empty .reloc section in PE/COFF loader	Ard Biesheuvel
2014-06-25	Simplify the checking of SB and DB states	Gary Ching-Pang Lin
2014-06-25	Make sure we default to assuming we're locked down.	Peter Jones
2014-06-25	Check the secure variables with the lib functions	Gary Ching-Pang Lin
2014-06-25	Explain the logic in secure_mode() better.	Peter Jones
2014-06-25	Free the string from DevicePathToStr	Gary Ching-Pang Lin
2014-06-25	Silence the functions of shim protocol	Gary Ching-Pang Lin
2014-06-25	No newline for console_notify	Gary Ching-Pang Lin
2014-06-25	Remove grubpath in generate_path()	Gary Ching-Pang Lin
2014-06-25	Check the first 4 bytes of the certificate	Gary Ching-Pang Lin
2014-06-25	Fetch the netboot image from the same device	Gary Ching-Pang Lin
2014-04-11	Get rid of SectionCache in generate_hash(), it is unused.	Peter Jones
2014-04-11	Kees' patch missed the offset adjustment to PEHdr.	Peter Jones
2014-04-11	additional bounds-checking on section sizes	Kees Cook
2014-02-14	Allow fallback to use the system's LoadImage/StartImage .	Peter Jones
2013-11-19	Don't hook system services if shim has no built-in keys	Matthew Garrett
2013-11-19	Clarify meaning of insecure_mode	Matthew Garrett
2013-11-12	shim: improve error messages	Andrew Boie
2013-11-12	shim.c: Add support for hashing/relocation of 32-bit binaries	Mohanraj S
2013-11-12	fix verify_mok()	Andrew Boie
2013-11-06	Fix check logic for SetupMode variable.	Peter Jones
2013-10-30	Don't free GetVariable() return data without checking the status code.	Peter Jones
2013-10-28	We should be checking both mok and the system's SB settings	Peter Jones
2013-10-23	Revert "additional bounds-checking on section sizes"	Peter Jones
2013-10-22	Don't reject all binaries without a certificate database.	Peter Jones
2013-10-22	additional bounds-checking on section sizes	Kees Cook
2013-10-04	Unhook system services as we exit.	Peter Jones
2013-10-04	Try to actually make debug printing look reasonable.	Peter Jones
2013-10-04	Do more strict checking on PE Headers.	Peter Jones
2013-10-03	Improve PE image bounds checking.	Peter Jones
2013-10-03	Add ident-like blobs to shim.efi for version checking.	Peter Jones
2013-10-02	Add support for disabling db for verification	Josh Boyer
2013-10-02	Fix wrong type on console_error() call.	Peter Jones
2013-10-01	If we fail to install our protocol, don't continue.	Peter Jones
2013-10-01	Conditionalize overriding the security policy.	Peter Jones
2013-10-01	Merge console_control.h and console.h	Peter Jones
2013-10-01	Make verbose stuff use console_notify	Peter Jones
2013-10-01	Include shim's vendor_cert in MokListRT	Peter Jones
2013-10-01	Harden shim against non-participating bootloaders.	Peter Jones
2013-10-01	Make vendor_cert/vendor_dbx actually replaceable by an external tool.	Peter Jones