add efi secure boot support

Hi,

This patch series rework the secure boot support to make it generic and we could use it on EFI too

The following changes since commit 2846e53d2d41742348459676edab737edf90604a:

arm: baltos: define baltos_sram_init() return type as void (2017-03-13 09:13:17 +0100)

are available in the git repository at:

git://git.jcrosoft.org/barebox.git delivery/efi-sb

for you to fetch changes up to ff17500171e65d8c20c7c0acc803aa5a4d22d014:

efi: enable sercure boot support (2017-03-15 03:09:09 +0800)

----------------------------------------------------------------
Jean-Christophe PLAGNIOL-VILLARD (13):
bootm: move open to image_handler
boot_verify: use a new error ESECVIOLATION
bootm: make security generic
boot: invert the secure boot forcing support move boot verify to generic code
boot_verify: make it modifiable at start time
go: only use it if boot signature is not required
boot_verify: allow to force unsigned image to boot
boot_verify: add password request support
efi: add more security related guid for the efivars
efi: fix lds for secure boot support
efi: fix secure and setup mode report
efi: enable sercure boot support

 arch/arm/lib/bootm.c                         |   3 +++
 arch/blackfin/lib/blackfin_linux.c           |   1 +
 arch/nios2/lib/bootm.c                       |   1 +
 arch/ppc/lib/ppclinux.c                      |   1 +
 arch/x86/Kconfig                             |   1 +
 arch/x86/mach-efi/elf_ia32_efi.lds.S         |  10 +++++++---
 arch/x86/mach-efi/elf_x86_64_efi.lds.S       |  10 ++++++----
 arch/x86/mach-efi/include/mach/barebox.lds.h |  14 +++++++++++++-
 commands/bootm.c                             |   6 +++---
 commands/go.c                                |   9 +++++++++
 common/Kconfig                               |  24 ++++++++++++++++++++----
 common/Makefile                              |   1 +
 common/boot_verify.c                         | 113 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 common/bootm.c                               | 123 ++++++++++++++++++++++++++++++++++++++-------------------------------------------------------------------------------------
 common/efi-guid.c                            |   6 ++++++
 common/efi/efi-image.c                       |   1 +
 common/efi/efi.c                             |   2 +-
 common/image-fit.c                           |  42 +++++++++++++++++++++++++++++-------------
 common/misc.c                                |   1 +
 common/password.c                            |  18 ++++++++++++++++++
 common/uimage.c                              |  33 +++++++++++++++++++++++++++++++++
 drivers/efi/efi-device.c                     |  17 +++++++++++++----
 include/asm-generic/barebox.lds.h            |   8 +++++---
 include/asm-generic/errno.h                  |   1 +
 include/boot_verify.h                        |  36 ++++++++++++++++++++++++++++++++++++
 include/bootm.h                              |  16 +++++-----------
 include/efi.h                                |  18 ++++++++++++++++++
 include/image-fit.h                          |   5 +++--
 include/image.h                              |   2 ++
 include/password.h                           |   6 ++++++
 30 files changed, 395 insertions(+), 134 deletions(-)

Best Regards,
J.

_______________________________________________
barebox mailing list
[email protected]
http://lists.infradead.org/mailman/listinfo/barebox