| commit | cfbcf054a323b692e85e73fc2a57400ee92f6b63 | [log] [tgz] |
|---|---|---|
| author | Masahisa Kojima <masahisa.kojima@linaro.org> | Fri Aug 13 16:12:39 2021 +0900 |
| committer | Heinrich Schuchardt <xypron.glpk@gmx.de> | Sat Aug 14 20:54:41 2021 +0200 |
| tree | 109598db349ecabe1bb4264c3fef415ba5da33ab | |
| parent | 17a50bd689ab7e506c71df0856fed5935cf323d1 [diff] |
efi_loader: add secure boot variable measurement TCG PC Client PFP spec requires to measure the secure boot policy before validating the UEFI image. This commit adds the secure boot variable measurement of "SecureBoot", "PK", "KEK", "db", "dbx", "dbt", and "dbr". Note that this implementation assumes that secure boot variables are pre-configured and not be set/updated in runtime. Signed-off-by: Masahisa Kojima <masahisa.kojima@linaro.org>