diff options
| author | Chester Lin <clin@suse.com> | 2020-10-30 09:08:38 +0300 |
|---|---|---|
| committer | Ard Biesheuvel <ardb@kernel.org> | 2020-11-05 01:05:40 +0300 |
| commit | e1ac4b2406d94eddce8ac2c5ab4235f6075a9602 (patch) | |
| tree | 668816181cf8a034e3af08297f94a0e1e33c1350 /security/integrity/ima/ima_efi.c | |
| parent | 6edcf9dc2e1aff3aa1f5a69ee420fb30dd0e968a (diff) | |
| download | linux-e1ac4b2406d94eddce8ac2c5ab4235f6075a9602.tar.xz | |
efi: generalize efi_get_secureboot
Generalize the efi_get_secureboot() function so not only efistub but also
other subsystems can use it.
Note that the MokSbState handling is not factored out: the variable is
boot time only, and so it cannot be parameterized as easily. Also, the
IMA code will switch to this version in a future patch, and it does not
incorporate the MokSbState exception in the first place.
Note that the new efi_get_secureboot_mode() helper treats any failures
to read SetupMode as setup mode being disabled.
Co-developed-by: Chester Lin <clin@suse.com>
Signed-off-by: Chester Lin <clin@suse.com>
Acked-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Diffstat (limited to 'security/integrity/ima/ima_efi.c')
0 files changed, 0 insertions, 0 deletions