Re: [PATCH] eficonfig: EFI_VARIABLE_APPEND_WRITE is not set for null key

2022-12-20 Thread Masahisa Kojima
Hi Ilias, On Tue, 20 Dec 2022 at 15:56, Ilias Apalodimas wrote: > > On Tue, Dec 20, 2022 at 12:12:56AM +0900, Masahisa Kojima wrote: > > The signed null key with authenticated header is used to clear > > the PK, KEK, db and dbx. When CONFIG_EFI_MM_COMM_TEE is enabled > > (StMM and OP-TEE based RP

Re: [PATCH] eficonfig: EFI_VARIABLE_APPEND_WRITE is not set for null key

2022-12-19 Thread Ilias Apalodimas
On Tue, Dec 20, 2022 at 12:12:56AM +0900, Masahisa Kojima wrote: > The signed null key with authenticated header is used to clear > the PK, KEK, db and dbx. When CONFIG_EFI_MM_COMM_TEE is enabled > (StMM and OP-TEE based RPMB storage is used as the EFI variable > storage), clearing KEK, db and dbx

[PATCH] eficonfig: EFI_VARIABLE_APPEND_WRITE is not set for null key

2022-12-19 Thread Masahisa Kojima
The signed null key with authenticated header is used to clear the PK, KEK, db and dbx. When CONFIG_EFI_MM_COMM_TEE is enabled (StMM and OP-TEE based RPMB storage is used as the EFI variable storage), clearing KEK, db and dbx by enrolling a signed null key does not work as expected if EFI_VARIABLE_