mail archive of the barebox mailing list
 help / color / mirror / Atom feed
From: Jean-Christophe PLAGNIOL-VILLARD <plagnioj@jcrosoft.com>
To: barebox@lists.infradead.org
Subject: [PATCH 00/13] add efi secure boot support
Date: Sat, 25 Mar 2017 09:31:55 +0100	[thread overview]
Message-ID: <20170325083155.GA14076@mail.ovh.net> (raw)

Hi,

	This patch series rework the secure boot support to make it generic
	and we could use it on EFI too

The following changes since commit 2846e53d2d41742348459676edab737edf90604a:

  arm: baltos: define baltos_sram_init() return type as void (2017-03-13 09:13:17 +0100)

are available in the git repository at:

  git://git.jcrosoft.org/barebox.git delivery/efi-sb

for you to fetch changes up to ff17500171e65d8c20c7c0acc803aa5a4d22d014:

  efi: enable sercure boot support (2017-03-15 03:09:09 +0800)

----------------------------------------------------------------
Jean-Christophe PLAGNIOL-VILLARD (13):
      bootm: move open to image_handler
      boot_verify: use a new error ESECVIOLATION
      bootm: make security generic
      boot: invert the secure boot forcing support
      move boot verify to generic code
      boot_verify: make it modifiable at start time
      go: only use it if boot signature is not required
      boot_verify: allow to force unsigned image to boot
      boot_verify: add password request support
      efi: add more security related guid for the efivars
      efi: fix lds for secure boot support
      efi: fix secure and setup mode report
      efi: enable sercure boot support

 arch/arm/lib/bootm.c                         |   3 +++
 arch/blackfin/lib/blackfin_linux.c           |   1 +
 arch/nios2/lib/bootm.c                       |   1 +
 arch/ppc/lib/ppclinux.c                      |   1 +
 arch/x86/Kconfig                             |   1 +
 arch/x86/mach-efi/elf_ia32_efi.lds.S         |  10 +++++++---
 arch/x86/mach-efi/elf_x86_64_efi.lds.S       |  10 ++++++----
 arch/x86/mach-efi/include/mach/barebox.lds.h |  14 +++++++++++++-
 commands/bootm.c                             |   6 +++---
 commands/go.c                                |   9 +++++++++
 common/Kconfig                               |  24 ++++++++++++++++++++----
 common/Makefile                              |   1 +
 common/boot_verify.c                         | 113 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 common/bootm.c                               | 123 ++++++++++++++++++++++++++++++++++++++-------------------------------------------------------------------------------------
 common/efi-guid.c                            |   6 ++++++
 common/efi/efi-image.c                       |   1 +
 common/efi/efi.c                             |   2 +-
 common/image-fit.c                           |  42 +++++++++++++++++++++++++++++-------------
 common/misc.c                                |   1 +
 common/password.c                            |  18 ++++++++++++++++++
 common/uimage.c                              |  33 +++++++++++++++++++++++++++++++++
 drivers/efi/efi-device.c                     |  17 +++++++++++++----
 include/asm-generic/barebox.lds.h            |   8 +++++---
 include/asm-generic/errno.h                  |   1 +
 include/boot_verify.h                        |  36 ++++++++++++++++++++++++++++++++++++
 include/bootm.h                              |  16 +++++-----------
 include/efi.h                                |  18 ++++++++++++++++++
 include/image-fit.h                          |   5 +++--
 include/image.h                              |   2 ++
 include/password.h                           |   6 ++++++
 30 files changed, 395 insertions(+), 134 deletions(-)

Best Regards,
J.

_______________________________________________
barebox mailing list
barebox@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/barebox

             reply	other threads:[~2017-03-25  8:25 UTC|newest]

Thread overview: 22+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-03-25  8:31 Jean-Christophe PLAGNIOL-VILLARD [this message]
2017-03-26  2:44 ` [PATCH 01/13] bootm: move open to image_handler Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  2:44   ` [PATCH 02/13] boot_verify: use a new error ESECVIOLATION Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  7:59     ` Michael Olbrich
2017-03-26  2:44   ` [PATCH 03/13] bootm: make security generic Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  2:44   ` [PATCH 04/13] boot: invert the secure boot forcing support Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  2:44   ` [PATCH 05/13] move boot verify to generic code Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  2:44   ` [PATCH 06/13] boot_verify: make it modifiable at start time Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  8:16     ` Michael Olbrich
2017-03-26  2:44   ` [PATCH 07/13] go: only use it if boot signature is not required Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  8:23     ` Michael Olbrich
2017-03-27 11:50       ` Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  2:44   ` [PATCH 08/13] boot_verify: allow to force unsigned image to boot Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  8:25     ` Michael Olbrich
2017-03-26  2:45   ` [PATCH 09/13] boot_verify: add password request support Jean-Christophe PLAGNIOL-VILLARD
2017-03-27  6:11     ` Sascha Hauer
2017-03-26  2:45   ` [PATCH 10/13] efi: add more security related guid for the efivars Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  2:45   ` [PATCH 11/13] efi: fix lds for secure boot support Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  8:30     ` Michael Olbrich
2017-03-26  2:45   ` [PATCH 12/13] efi: fix secure and setup mode report Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  2:45   ` [PATCH 13/13] efi: enable sercure boot support Jean-Christophe PLAGNIOL-VILLARD
2017-03-26  7:57   ` [PATCH 01/13] bootm: move open to image_handler Michael Olbrich

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20170325083155.GA14076@mail.ovh.net \
    --to=plagnioj@jcrosoft.com \
    --cc=barebox@lists.infradead.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox