u-boot.git/lib/efi_loader/efi_variable.c, branch v2020.10-rc1

efi_loader: pre-seed UEFI variables

2020-07-16T10:37:02+00:00

Include a file with the initial values for non-volatile UEFI variables
into the U-Boot binary. If this variable is set, changes to variable PK
will not be allowed.

Signed-off-by: Heinrich Schuchardt

efi_loader: identify PK, KEK, db, dbx correctly

2020-07-16T10:37:02+00:00

To determine if a varible is on the of the authentication variables
PK, KEK, db, dbx we have to check both the name and the GUID.

Provide a function converting the variable-name/guid pair to an enum and
use it consistently.

Signed-off-by: Heinrich Schuchardt

efi_loader: restructure code for TEE variables

2020-07-16T10:37:02+00:00

When using secure boot functions needed both for file and TEE based UEFI
variables have to be moved to the common code module efi_var_common.c.

Signed-off-by: Heinrich Schuchardt

efi_loader: enable UEFI variables at runtime

2020-07-11T21:14:17+00:00

Enable UEFI variables at runtime.

Signed-off-by: Heinrich Schuchardt

efi_loader: use memory based variable storage

2020-07-11T21:14:17+00:00

Saving UEFI variable as encoded U-Boot environment variables does not allow
implement run-time support.

Use a memory buffer for storing UEFI variables.

Signed-off-by: Heinrich Schuchardt

efi_loader: UEFI variable persistence

2020-07-11T21:14:17+00:00

Persist non-volatile UEFI variables in a file on the EFI system partition.

The file is written whenever a non-volatile UEFI variable is changed after
initialization of the UEFI sub-system.

The file is read during the UEFI sub-system initialization to restore
non-volatile UEFI variables.

Signed-off-by: Heinrich Schuchardt

efi_loader: secure boot flag

2020-07-11T21:14:17+00:00

In audit mode the UEFI variable SecureBoot is set to zero but the
efi_secure_boot flag is set to true.

The efi_secure_boot flag should match the UEFIvariable SecureBoot.

Signed-off-by: Heinrich Schuchardt

efi_loader: read-only AuditMode and DeployedMode

2020-07-11T21:14:17+00:00

Set the read only property of the UEFI variables AuditMode and DeployedMode
conforming to the UEFI specification.

Signed-off-by: Heinrich Schuchardt

efi_loader: value of VendorKeys

2020-07-11T21:14:17+00:00

According to the UEFI specification the variable VendorKeys is 1 if the
"system is configured to use only vendor-provided keys".

As we do not supply any vendor keys yet the variable VendorKeys must be
zero.

Signed-off-by: Heinrich Schuchardt

efi_loader: keep attributes in efi_set_variable_int

2020-07-11T21:14:17+00:00

Do not change the value of parameter attributes in function
efi_set_variable_int(). This allows to use it later.

Do not use variable attr for different purposes but declare separate
variables (attr and old_attr).

Signed-off-by: Heinrich Schuchardt