From: Jean-Christophe PLAGNIOL-VILLARD <plagnioj@jcrosoft.com>
To: barebox@lists.infradead.org
Subject: [PATCH 00/13] add efi secure boot support
Date: Sat, 25 Mar 2017 09:31:55 +0100 [thread overview]
Message-ID: <20170325083155.GA14076@mail.ovh.net> (raw)
Hi,
This patch series rework the secure boot support to make it generic
and we could use it on EFI too
The following changes since commit 2846e53d2d41742348459676edab737edf90604a:
arm: baltos: define baltos_sram_init() return type as void (2017-03-13 09:13:17 +0100)
are available in the git repository at:
git://git.jcrosoft.org/barebox.git delivery/efi-sb
for you to fetch changes up to ff17500171e65d8c20c7c0acc803aa5a4d22d014:
efi: enable sercure boot support (2017-03-15 03:09:09 +0800)
----------------------------------------------------------------
Jean-Christophe PLAGNIOL-VILLARD (13):
bootm: move open to image_handler
boot_verify: use a new error ESECVIOLATION
bootm: make security generic
boot: invert the secure boot forcing support
move boot verify to generic code
boot_verify: make it modifiable at start time
go: only use it if boot signature is not required
boot_verify: allow to force unsigned image to boot
boot_verify: add password request support
efi: add more security related guid for the efivars
efi: fix lds for secure boot support
efi: fix secure and setup mode report
efi: enable sercure boot support
arch/arm/lib/bootm.c | 3 +++
arch/blackfin/lib/blackfin_linux.c | 1 +
arch/nios2/lib/bootm.c | 1 +
arch/ppc/lib/ppclinux.c | 1 +
arch/x86/Kconfig | 1 +
arch/x86/mach-efi/elf_ia32_efi.lds.S | 10 +++++++---
arch/x86/mach-efi/elf_x86_64_efi.lds.S | 10 ++++++----
arch/x86/mach-efi/include/mach/barebox.lds.h | 14 +++++++++++++-
commands/bootm.c | 6 +++---
commands/go.c | 9 +++++++++
common/Kconfig | 24 ++++++++++++++++++++----
common/Makefile | 1 +
common/boot_verify.c | 113 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
common/bootm.c | 123 ++++++++++++++++++++++++++++++++++++++-------------------------------------------------------------------------------------
common/efi-guid.c | 6 ++++++
common/efi/efi-image.c | 1 +
common/efi/efi.c | 2 +-
common/image-fit.c | 42 +++++++++++++++++++++++++++++-------------
common/misc.c | 1 +
common/password.c | 18 ++++++++++++++++++
common/uimage.c | 33 +++++++++++++++++++++++++++++++++
drivers/efi/efi-device.c | 17 +++++++++++++----
include/asm-generic/barebox.lds.h | 8 +++++---
include/asm-generic/errno.h | 1 +
include/boot_verify.h | 36 ++++++++++++++++++++++++++++++++++++
include/bootm.h | 16 +++++-----------
include/efi.h | 18 ++++++++++++++++++
include/image-fit.h | 5 +++--
include/image.h | 2 ++
include/password.h | 6 ++++++
30 files changed, 395 insertions(+), 134 deletions(-)
Best Regards,
J.
_______________________________________________
barebox mailing list
barebox@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/barebox
next reply other threads:[~2017-03-25 8:25 UTC|newest]
Thread overview: 22+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-03-25 8:31 Jean-Christophe PLAGNIOL-VILLARD [this message]
2017-03-26 2:44 ` [PATCH 01/13] bootm: move open to image_handler Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 2:44 ` [PATCH 02/13] boot_verify: use a new error ESECVIOLATION Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 7:59 ` Michael Olbrich
2017-03-26 2:44 ` [PATCH 03/13] bootm: make security generic Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 2:44 ` [PATCH 04/13] boot: invert the secure boot forcing support Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 2:44 ` [PATCH 05/13] move boot verify to generic code Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 2:44 ` [PATCH 06/13] boot_verify: make it modifiable at start time Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 8:16 ` Michael Olbrich
2017-03-26 2:44 ` [PATCH 07/13] go: only use it if boot signature is not required Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 8:23 ` Michael Olbrich
2017-03-27 11:50 ` Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 2:44 ` [PATCH 08/13] boot_verify: allow to force unsigned image to boot Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 8:25 ` Michael Olbrich
2017-03-26 2:45 ` [PATCH 09/13] boot_verify: add password request support Jean-Christophe PLAGNIOL-VILLARD
2017-03-27 6:11 ` Sascha Hauer
2017-03-26 2:45 ` [PATCH 10/13] efi: add more security related guid for the efivars Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 2:45 ` [PATCH 11/13] efi: fix lds for secure boot support Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 8:30 ` Michael Olbrich
2017-03-26 2:45 ` [PATCH 12/13] efi: fix secure and setup mode report Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 2:45 ` [PATCH 13/13] efi: enable sercure boot support Jean-Christophe PLAGNIOL-VILLARD
2017-03-26 7:57 ` [PATCH 01/13] bootm: move open to image_handler Michael Olbrich
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20170325083155.GA14076@mail.ovh.net \
--to=plagnioj@jcrosoft.com \
--cc=barebox@lists.infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox