]> git.dujemihanovic.xyz Git - u-boot.git/commit
efi_loader: add boot variable measurement
authorMasahisa Kojima <masahisa.kojima@linaro.org>
Fri, 13 Aug 2021 07:12:40 +0000 (16:12 +0900)
committerHeinrich Schuchardt <xypron.glpk@gmx.de>
Sat, 14 Aug 2021 18:54:41 +0000 (20:54 +0200)
commit8fc4e0b4273adc741dfd1917970162ca224f98bf
treec2ff67ece6ecfa4203f6d562e6f5e6afcb2365cc
parentcfbcf054a323b692e85e73fc2a57400ee92f6b63
efi_loader: add boot variable measurement

TCG PC Client PFP spec requires to measure "Boot####"
and "BootOrder" variables, EV_SEPARATOR event prior
to the Ready to Boot invocation.
Since u-boot does not implement Ready to Boot event,
these measurements are performed when efi_start_image() is called.

TCG spec also requires to measure "Calling EFI Application from
Boot Option" for each boot attempt, and "Returning from EFI
Application from Boot Option" if a boot device returns control
back to the Boot Manager.

Signed-off-by: Masahisa Kojima <masahisa.kojima@linaro.org>
include/efi_loader.h
include/tpm-v2.h
lib/efi_loader/efi_boottime.c
lib/efi_loader/efi_tcg2.c