Re: [PATCH V2 0/3] integrity: Load certs from EFI MOK config table

2020-09-11 Thread Ard Biesheuvel
On Sat, 5 Sep 2020 at 04:31, Lenny Szubowicz wrote: > > Because of system-specific EFI firmware limitations, EFI volatile > variables may not be capable of holding the required contents of > the Machine Owner Key (MOK) certificate store when the certificate > list grows above some size. Therefore,

Re: [PATCH V2 0/3] integrity: Load certs from EFI MOK config table

2020-09-11 Thread Mimi Zohar
On Fri, 2020-09-11 at 18:17 +0300, Ard Biesheuvel wrote: > On Sat, 5 Sep 2020 at 04:31, Lenny Szubowicz wrote: > > > > Because of system-specific EFI firmware limitations, EFI volatile > > variables may not be capable of holding the required contents of > > the Machine Owner Key (MOK) certificate

[PATCH V2 0/3] integrity: Load certs from EFI MOK config table

2020-09-04 Thread Lenny Szubowicz
Because of system-specific EFI firmware limitations, EFI volatile variables may not be capable of holding the required contents of the Machine Owner Key (MOK) certificate store when the certificate list grows above some size. Therefore, an EFI boot loader may pass the MOK certs via a EFI configurat