From 49db3de08ef2c55f6dbc3c2b8e6ab7b2f22e5309 Mon Sep 17 00:00:00 2001 From: Peter Jones Date: Wed, 15 May 2024 16:13:40 -0400 Subject: mok: add MOK_VARIABLE_CONFIG_ONLY This adds a mok variable flag "MOK_VARIABLE_CONFIG_ONLY" to specify that the data should be added to our UEFI config table, but shim should not create a legacy UEFI variable. Signed-off-by: Peter Jones --- include/mok.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'include') diff --git a/include/mok.h b/include/mok.h index fb19423b..fe92cf03 100644 --- a/include/mok.h +++ b/include/mok.h @@ -81,6 +81,8 @@ struct mok_state_variable { * MOK_MIRROR_DELETE_FIRST delete any existing variable first * MOK_VARIABLE_MEASURE extend PCR 7 and log the hash change * MOK_VARIABLE_LOG measure into whatever .pcr says and log + * MOK_VARIABLE_CONFIG_ONLY don't create a UEFI variable, only add + * it to the config space variables. */ UINTN pcr; /* PCR to measure and hash to */ -- cgit v1.2.3