Re: [PATCH V2 1/3] efi: Support for MOK variable config table

2020-10-01 Thread Nathan Chancellor
On Thu, Oct 01, 2020 at 10:57:07PM +0200, Ard Biesheuvel wrote: > On Thu, 1 Oct 2020 at 19:44, Nathan Chancellor > wrote: > > > > On Fri, Sep 04, 2020 at 09:31:05PM -0400, Lenny Szubowicz wrote: > > > Because of system-specific EFI firmware limitations, EFI volatile > > > variables may not be cap

Re: [PATCH V2 1/3] efi: Support for MOK variable config table

2020-10-01 Thread Ard Biesheuvel
On Thu, 1 Oct 2020 at 19:44, Nathan Chancellor wrote: > > On Fri, Sep 04, 2020 at 09:31:05PM -0400, Lenny Szubowicz wrote: > > Because of system-specific EFI firmware limitations, EFI volatile > > variables may not be capable of holding the required contents of > > the Machine Owner Key (MOK) cert

Re: [PATCH V2 1/3] efi: Support for MOK variable config table

2020-10-01 Thread Nathan Chancellor
On Fri, Sep 04, 2020 at 09:31:05PM -0400, Lenny Szubowicz wrote: > Because of system-specific EFI firmware limitations, EFI volatile > variables may not be capable of holding the required contents of > the Machine Owner Key (MOK) certificate store when the certificate > list grows above some size.

Re: [PATCH V2 1/3] efi: Support for MOK variable config table

2020-09-24 Thread Lenny Szubowicz
On 9/21/20 12:55 PM, Arvind Sankar wrote: On Mon, Sep 21, 2020 at 06:27:17PM +0200, Ard Biesheuvel wrote: On Mon, 21 Sep 2020 at 18:19, Arvind Sankar wrote: On Fri, Sep 04, 2020 at 09:31:05PM -0400, Lenny Szubowicz wrote: + /* + * The EFI MOK config table must fit within a single EF

Re: [PATCH V2 1/3] efi: Support for MOK variable config table

2020-09-21 Thread Arvind Sankar
On Mon, Sep 21, 2020 at 06:27:17PM +0200, Ard Biesheuvel wrote: > On Mon, 21 Sep 2020 at 18:19, Arvind Sankar wrote: > > > > On Fri, Sep 04, 2020 at 09:31:05PM -0400, Lenny Szubowicz wrote: > > > + /* > > > + * The EFI MOK config table must fit within a single EFI memory > > > + * de

Re: [PATCH V2 1/3] efi: Support for MOK variable config table

2020-09-21 Thread Ard Biesheuvel
On Mon, 21 Sep 2020 at 18:19, Arvind Sankar wrote: > > On Fri, Sep 04, 2020 at 09:31:05PM -0400, Lenny Szubowicz wrote: > > Because of system-specific EFI firmware limitations, EFI volatile > > variables may not be capable of holding the required contents of > > the Machine Owner Key (MOK) certifi

Re: [PATCH V2 1/3] efi: Support for MOK variable config table

2020-09-21 Thread Arvind Sankar
On Fri, Sep 04, 2020 at 09:31:05PM -0400, Lenny Szubowicz wrote: > Because of system-specific EFI firmware limitations, EFI volatile > variables may not be capable of holding the required contents of > the Machine Owner Key (MOK) certificate store when the certificate > list grows above some size.

[PATCH V2 1/3] efi: Support for MOK variable config table

2020-09-04 Thread Lenny Szubowicz
Because of system-specific EFI firmware limitations, EFI volatile variables may not be capable of holding the required contents of the Machine Owner Key (MOK) certificate store when the certificate list grows above some size. Therefore, an EFI boot loader may pass the MOK certs via a EFI configurat