Add TPM measured boot support

2017-07-05 Thread Matthew Garrett
This patchset extends the verifier framework to support verifying commands executed by Grub, and makes use of this to add support for measuring files and commands executed by grub into the TPM on UEFI-based systems. ___ Grub-devel mailing list Grub-deve

[PATCH 1/2] Verify commands executed by grub

2017-07-05 Thread Matthew Garrett
Pass commands to the verification code. We want to be able to log these in the TPM verification case. --- grub-core/script/execute.c | 27 --- include/grub/verify.h | 1 + 2 files changed, 25 insertions(+), 3 deletions(-) diff --git a/grub-core/script/execute.c b/gru

[PATCH 2/2] Core TPM support

2017-07-05 Thread Matthew Garrett
Add support for performing basic TPM measurements. Right now this only supports extending PCRs statically and only on UEFI. --- grub-core/Makefile.core.def| 7 + grub-core/commands/efi/tpm.c | 282 + grub-core/commands/tpm.c | 87 +

Re: Build failure on ppc64le

2017-07-05 Thread Vladimir 'phcoder' Serbinenko
On Tue, Jul 4, 2017, 19:48 Leif Lindholm wrote: > On Sat, Jul 01, 2017 at 02:41:05PM +0200, Paul Menzel wrote: > > Dear GRUB folks, > > > > Building GRUB at commit 7346682 (Allow GRUB to mount ext2/3/4 > > filesystems that have the encryption feature.) for the platform > > `powerpc-ieee1275` with

RE: [PATCH v2 0/9] Add UEFI HTTP Boot support for IPv4 and IPv6

2017-07-05 Thread Lin, Keng-Yu
> Hi Keng-Yu, > > Sorry for late reply but I clearing my backlog after long vacation. > > > Thank you for doing the work. Unfortunately it is too late to put it into > 2.02 release (I hope it will happen at the end of February or at beginning of > March). I am adding this patch set to review > af