commit b191aa429e509ba6bf9eb446ae27b1a4fcd83276
author Heinrich Schuchardt <heinrich.schuchardt@canonical.com> Thu Aug 26 04:30:24 2021 +0200
committer Heinrich Schuchardt <xypron.glpk@gmx.de> Sat Sep 04 12:03:57 2021 +0200
tree 1bd3d5f6975f298a5e21f625ab91180420510fcc
parent 9ef82e29478c76f17b536f8f289fd0406067ab01

efi_loader: efi_auth_var_type for AuditMode, DeployedMode

Writing variables AuditMode and DeployedMode serves to switch between
Secure Boot modes. Provide a separate value for these in efi_auth_var_type.

With this patch the variables will not be read from from file even if they
are marked as non-volatile by mistake.

Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>

include/efi_variable.h

diff --git a/include/efi_variable.h b/include/efi_variable.h
index 2d97655..0440d35 100644
--- a/include/efi_variable.h
+++ b/include/efi_variable.h
@@ -12,6 +12,7 @@
 
 enum efi_auth_var_type {
 	EFI_AUTH_VAR_NONE = 0,
+	EFI_AUTH_MODE,
 	EFI_AUTH_VAR_PK,
 	EFI_AUTH_VAR_KEK,
 	EFI_AUTH_VAR_DB,