Re: [PATCH v8 4/5] eficonfig: add UEFI Secure Boot Key enrollment interface

2022-11-13 Thread Masahisa Kojima
Hi Ilias, On Fri, 11 Nov 2022 at 21:33, Ilias Apalodimas wrote: > > Hello Kojima-san! > > [...] > > > + file_info.current_path = calloc(1, EFICONFIG_FILE_PATH_BUF_SIZE); > > + if (!file_info.current_path) { > > + ret = EFI_OUT_OF_RESOURCES; > > + goto out; > > +

Re: [PATCH v8 4/5] eficonfig: add UEFI Secure Boot Key enrollment interface

2022-11-11 Thread Ilias Apalodimas
Hello Kojima-san! [...] > + file_info.current_path = calloc(1, EFICONFIG_FILE_PATH_BUF_SIZE); > + if (!file_info.current_path) { > + ret = EFI_OUT_OF_RESOURCES; > + goto out; > + } > + > + ret = eficonfig_process_select_file(&file_info); > + if (ret !=

[PATCH v8 4/5] eficonfig: add UEFI Secure Boot Key enrollment interface

2022-11-10 Thread Masahisa Kojima
This commit adds the menu-driven UEFI Secure Boot Key enrollment interface. User can enroll PK, KEK, db and dbx by selecting file. Only the signed EFI Signature List(s) with an authenticated header, typically '.auth' file, is accepted. To clear the PK, KEK, db and dbx, user needs to enroll the nul