Re: [PATCH v3 1/3] efi_loader: don't load signature database from file

2021-09-05 Thread Heinrich Schuchardt
On 9/6/21 2:12 AM, AKASHI Takahiro wrote: Heinrich, On Thu, Sep 02, 2021 at 11:35:29AM +0200, Heinrich Schuchardt wrote: The UEFI specification requires that the signature database may only be stored in tamper-resistant storage. So these variable may not be read from an unsigned file. Even

Re: [PATCH v3 1/3] efi_loader: don't load signature database from file

2021-09-05 Thread AKASHI Takahiro
Heinrich, On Thu, Sep 02, 2021 at 11:35:29AM +0200, Heinrich Schuchardt wrote: > The UEFI specification requires that the signature database may only be > stored in tamper-resistant storage. So these variable may not be read > from an unsigned file. Even with TF-A (or other methods) assumed, I th

[PATCH v3 1/3] efi_loader: don't load signature database from file

2021-09-02 Thread Heinrich Schuchardt
The UEFI specification requires that the signature database may only be stored in tamper-resistant storage. So these variable may not be read from an unsigned file. Signed-off-by: Heinrich Schuchardt --- include/efi_variable.h | 5 +++- lib/efi_loader/efi_var_common.c | 2 -- lib/efi_