u-boot.git/lib/efi_loader/Kconfig, branch v2021.01

efi_loader: make variable store size customizable

2020-12-20T16:40:06Z

Currently the size of the buffer to keep UEFI variables in memory is fixed at 16384 bytes. This size has proven to be too small for some use cases. Make the size of the memory buffer for UEFI variables customizable. Reported-by: Paulo Alcantara (SUSE) Signed-off-by: Heinrich Schuchardt Acked-by: Ilias Apalodimas

efi_loader: enable EFI_SET_TIME on sandbox and QEMU ARM

2020-11-29T04:18:37Z

Enable EFI_SET_TIME on the sandbox and QEMU ARM to ensure that we compile and test the relevant code. Signed-off-by: Heinrich Schuchardt

efi_loader: Add basic EFI_TCG2_PROTOCOL support

2020-11-14T04:05:46Z

Since U-boot EFI implementation is getting richer it makes sense to add support for EFI_TCG2_PROTOCOL taking advantage of any hardware TPM available on the device. This is the initial implementation of the protocol which only adds support for GetCapability(). It's limited in the newer and safer TPMv2 devices. Signed-off-by: Ilias Apalodimas Acked-by: Heinrich Schuchardt Signed-off-by: Heinrich Schuchardt

efi_loader: add option to initialise EFI subsystem early

2020-10-30T13:20:27Z

If this option, CONFIG_EFI_SETUP_EARLY, is enabled, the initialisation of UEFI subsystem will be done as part of U-Boot initialisation. Please note that this option won't be enabled explicitly by users, instead, should be enabled implicitly by other configuration options. Specifically, this feature will be utilised in implementing capsule-on-disk feature. Signed-off-by: AKASHI Takahiro Reviewed-by: Heinrich Schuchardt

efi_loader: QEMU CONFIG_EFI_GRUB_ARM32_WORKAROUND=n

2020-10-06T05:43:56Z

CONFIG_EFI_GRUB_ARM32 is only needed for architectures with caches that are not managed via CP15 (or for some outdated buggy versions of GRUB). It makes more sense to disable the setting per architecture than per defconfig. Move QEMU's CONFIG_EFI_GRUB_ARM32_WORKAROUND=n from defconfig to Kconfig. Signed-off-by: Heinrich Schuchardt

efi_loader: signature: rework for intermediate certificates support

2020-08-13T20:37:36Z

In this commit, efi_signature_verify(with_sigdb) will be re-implemented using pcks7_verify_one() in order to support certificates chain, where the signer's certificate will be signed by an intermediate CA (certificate authority) and the latter's certificate will also be signed by another CA and so on. What we need to do here is to search for certificates in a signature, build up a chain of certificates and verify one by one. pkcs7_verify_one() handles most of these steps except the last one. pkcs7_verify_one() returns, if succeeded, the last certificate to verify, which can be either a self-signed one or one that should be signed by one of certificates in "db". Re-worked efi_signature_verify() will take care of this step. Signed-off-by: AKASHI Takahiro

efi_loader: pre-seed UEFI variables

2020-07-16T10:37:02Z

Include a file with the initial values for non-volatile UEFI variables into the U-Boot binary. If this variable is set, changes to variable PK will not be allowed. Signed-off-by: Heinrich Schuchardt

efi_loader: configuration of variables store

2020-07-16T10:37:02Z

The file based and the OP-TEE based UEFI variable store are mutually exclusive. Define them as choice options in Kconfig. Signed-off-by: Heinrich Schuchardt

efi_loader: UEFI variable persistence

2020-07-11T21:14:17Z

Persist non-volatile UEFI variables in a file on the EFI system partition. The file is written whenever a non-volatile UEFI variable is changed after initialization of the UEFI sub-system. The file is read during the UEFI sub-system initialization to restore non-volatile UEFI variables. Signed-off-by: Heinrich Schuchardt

efi_loader: imply FAT, FAT_WRITE

2020-07-03T16:03:56Z

The UEFI spec requires support for the FAT file system. Signed-off-by: Heinrich Schuchardt