Enable the EDK2 Crypto Policy features on the PC machine.
Signed-off-by: Philippe Mathieu-Daudé <phi...@redhat.com>
---
hw/i386/pc.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/hw/i386/pc.c b/hw/i386/pc.c
index 42128183e9..00dc377df0 100644
--- a/hw/i386/pc.c
+++ b/hw/i386/pc.c
@@ -38,6 +38,7 @@
#include "hw/nvram/fw_cfg.h"
#include "hw/timer/hpet.h"
#include "hw/firmware/smbios.h"
+#include "hw/firmware/uefi_edk2.h"
#include "hw/loader.h"
#include "elf.h"
#include "multiboot.h"
@@ -1046,6 +1047,11 @@ static FWCfgState *bochs_bios_init(AddressSpace *as,
PCMachineState *pcms)
return fw_cfg;
}
+static void pc_uefi_setup(PCMachineState *pcms)
+{
+ edk2_add_host_crypto_policy(pcms->fw_cfg);
+}
+
static long get_file_size(FILE *f)
{
long where, size;
@@ -1645,6 +1651,7 @@ void pc_machine_done(Notifier *notifier, void *data)
if (pcms->fw_cfg) {
pc_build_smbios(pcms);
pc_build_feature_control_file(pcms);
+ pc_uefi_setup(pcms);
/* update FW_CFG_NB_CPUS to account for -device added CPUs */
fw_cfg_modify_i16(pcms->fw_cfg, FW_CFG_NB_CPUS, pcms->boot_cpus);
}
--
2.20.1
