diff options
| author |   Chester Lin <clin@suse.com> | 2020-10-30 14:08:38 +0800 |
|---|---|---|
| committer |   Ard Biesheuvel <ardb@kernel.org> | 2020-11-04 23:05:40 +0100 |
| commit | e1ac4b2406d94eddce8ac2c5ab4235f6075a9602 (patch) | |
| tree | 668816181cf8a034e3af08297f94a0e1e33c1350 /drivers/firmware/efi/libstub/efistub.h | |
| parent | efi/libstub: EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER should not default to yes (diff) | |
| download | linux-dev-e1ac4b2406d94eddce8ac2c5ab4235f6075a9602.tar.xz linux-dev-e1ac4b2406d94eddce8ac2c5ab4235f6075a9602.zip | |
efi: generalize efi_get_secureboot
Generalize the efi_get_secureboot() function so not only efistub but also
other subsystems can use it.
Note that the MokSbState handling is not factored out: the variable is
boot time only, and so it cannot be parameterized as easily. Also, the
IMA code will switch to this version in a future patch, and it does not
incorporate the MokSbState exception in the first place.
Note that the new efi_get_secureboot_mode() helper treats any failures
to read SetupMode as setup mode being disabled.
Co-developed-by: Chester Lin <clin@suse.com>
Signed-off-by: Chester Lin <clin@suse.com>
Acked-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Diffstat (limited to 'drivers/firmware/efi/libstub/efistub.h')
| -rw-r--r-- | drivers/firmware/efi/libstub/efistub.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/drivers/firmware/efi/libstub/efistub.h b/drivers/firmware/efi/libstub/efistub.h index 2d7abcd99de9..b8ec29d6a74a 100644 --- a/drivers/firmware/efi/libstub/efistub.h +++ b/drivers/firmware/efi/libstub/efistub.h @@ -848,4 +848,6 @@ asmlinkage void __noreturn efi_enter_kernel(unsigned long entrypoint, void efi_handle_post_ebs_state(void); +enum efi_secureboot_mode efi_get_secureboot(void); + #endif |