[PATCH v2 2/2] mkimage: adding sbat metadata into sbat ELF Note on powerpc

2024-06-25 Thread Sudhakar Kuppusamy via Grub-devel
The SBAT metadata, which is read from .csv file and transformed into an ELF note, is made into an image using the -s option. Signed-off-by: Sudhakar Kuppusamy Co-authored-by: Daniel Axtens --- util/mkimage.c | 12 ++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/util

[PATCH v2 0/2] Secure Boot Advanced Targeting (SBAT) support on powerpc

2024-06-25 Thread Sudhakar Kuppusamy via Grub-devel
In powerpc, PE format Binary are not supported and can't use shim (https://github.com/rhboot/shim/blob/main/SBAT.md). However, ELF binary are supported. So, we created new ELF note for SBAT in ELF binary which store the SBAT data and SBAT verifier will be there in firmware to read SBAT data from

[PATCH v2 1/2] mkimage: create new ELF Note for SBAT

2024-06-25 Thread Sudhakar Kuppusamy via Grub-devel
In order to store the SBAT data, we create a new ELF note. The string "Secure-Boot-Advanced-Targeting", zero-padded to 4 byte alignment, shall be entered in the name field. The string "sbat"'s ASCII values, 0x41536967, should be entered in the type field. Signed-off-by: Sudhakar Kuppusamy Co-au