| Message ID | 1486380166-31868-1-git-send-email-ard.biesheuvel@linaro.org |
|---|---|
| Headers | show |
| Series | EFI updates for v4.11 part 2 | expand |
On 7 February 2017 at 07:52, Ingo Molnar <mingo@kernel.org> wrote: > > * Ard Biesheuvel <ard.biesheuvel@linaro.org> wrote: > >> From: David Howells <dhowells@redhat.com> >> >> Add the definitions for shim and image security database, both of which >> are used widely in various Linux distros. >> >> Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org> >> Signed-off-by: David Howells <dhowells@redhat.com> >> Cc: Matt Fleming <matt@codeblueprint.co.uk> >> Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> > > That's not a valid SOB chain: the SOB of the author of the patch (David Howells) > must come first. > > I changed it to: > > Signed-off-by: David Howells <dhowells@redhat.com> > Acked-by: Josh Boyer <jwboyer@fedoraproject.org> > Cc: Matt Fleming <matt@codeblueprint.co.uk> > Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> > > Please holler if that's not OK. > Ah yes, thanks for spotting that. OK with me -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Ingo Molnar <mingo@kernel.org> wrote: > That's not a valid SOB chain: the SOB of the author of the patch (David Howells) > must come first. > > I changed it to: > > Signed-off-by: David Howells <dhowells@redhat.com> > Acked-by: Josh Boyer <jwboyer@fedoraproject.org> > Cc: Matt Fleming <matt@codeblueprint.co.uk> > Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> > > Please holler if that's not OK. Actually, it should be authored by Josh Boyer. Somehow the authorship got lost. David -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
* David Howells <dhowells@redhat.com> wrote: > Ingo Molnar <mingo@kernel.org> wrote: > > > That's not a valid SOB chain: the SOB of the author of the patch (David Howells) > > must come first. > > > > I changed it to: > > > > Signed-off-by: David Howells <dhowells@redhat.com> > > Acked-by: Josh Boyer <jwboyer@fedoraproject.org> > > Cc: Matt Fleming <matt@codeblueprint.co.uk> > > Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> > > > > Please holler if that's not OK. > > Actually, it should be authored by Josh Boyer. Somehow the authorship got > lost. Ok, I have fixed it accordingly. Thanks, Ingo -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
These are patches that were still being discussed when I sent the first pull request last week, but we feel they are now in shape to be merged. Please pull. The following changes since commit a21a300289bb5a582cc96be23446fa35236a6a9a: efi: libstub: Preserve .debug sections after absolute relocation check (2017-01-31 11:47:39 +0000) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi.git tags/efi-next for you to fetch changes up to dfe7b0e7e1ab9dc02d754c7dd11e465be0944603: efi: libstub: Make file I/O chunking x86-specific (2017-02-03 17:01:06 +0000) ---------------------------------------------------------------- Some more EFI changes we've queued up for v4.11: * Changes to the EFI init code to infer from various EFI and shim variables whether secure boot authentication was performed at boot time. (Note that this is the uncontroversial part: I expect some fierce debate about future patches that impose or relax certain restrictions based on this information, but collecting it is useful in itself.) * Disable a x86 specific file I/O chunking workaround on ARM so it does not spuriously trigger build time checks in the ARM decompressor. ---------------------------------------------------------------- Ard Biesheuvel (1): efi: libstub: Make file I/O chunking x86-specific David Howells (5): x86/efi: Allow invocation of arbitrary runtime services arm/efi: Allow invocation of arbitrary runtime services efi: Add SHIM and image security database GUID definitions efi: Get the secure boot status efi: Print the secure boot status in x86 setup_arch() Josh Boyer (1): efi: Disable secure boot if shim is in insecure mode Documentation/x86/zero-page.txt | 2 + arch/arm/include/asm/efi.h | 1 + arch/arm64/include/asm/efi.h | 1 + arch/x86/boot/compressed/eboot.c | 8 +++ arch/x86/boot/compressed/head_32.S | 6 +- arch/x86/boot/compressed/head_64.S | 8 +-- arch/x86/include/asm/efi.h | 5 ++ arch/x86/include/uapi/asm/bootparam.h | 3 +- arch/x86/kernel/asm-offsets.c | 1 + arch/x86/kernel/setup.c | 14 +++++ drivers/firmware/efi/libstub/Makefile | 2 +- drivers/firmware/efi/libstub/arm-stub.c | 63 ++----------------- drivers/firmware/efi/libstub/efi-stub-helper.c | 12 +++- drivers/firmware/efi/libstub/secureboot.c | 86 ++++++++++++++++++++++++++ include/linux/efi.h | 11 ++++ 15 files changed, 156 insertions(+), 67 deletions(-) create mode 100644 drivers/firmware/efi/libstub/secureboot.c -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html