diff options
| author |   Ard Biesheuvel <ardb@kernel.org> | 2020-02-01 09:32:21 +0100 |
|---|---|---|
| committer |   Mimi Zohar <zohar@linux.ibm.com> | 2020-02-11 14:42:37 -0500 |
| commit | ff5ac61ee83c13f516544d29847d28be093a40ee (patch) | |
| tree | 2c74d8c21779f5753a602cf9ffc6b39b468ff9de /security/integrity/platform_certs/load_uefi.c | |
| parent | Linux 5.6-rc1 (diff) | |
| download | linux-dev-ff5ac61ee83c13f516544d29847d28be093a40ee.tar.xz linux-dev-ff5ac61ee83c13f516544d29847d28be093a40ee.zip | |
x86/ima: use correct identifier for SetupMode variable
The IMA arch code attempts to inspect the "SetupMode" EFI variable
by populating a variable called efi_SetupMode_name with the string
"SecureBoot" and passing that to the EFI GetVariable service, which
obviously does not yield the expected result.
Given that the string is only referenced a single time, let's get
rid of the intermediate variable, and pass the correct string as
an immediate argument. While at it, do the same for "SecureBoot".
Fixes: 399574c64eaf ("x86/ima: retry detecting secure boot mode")
Fixes: 980ef4d22a95 ("x86/ima: check EFI SetupMode too")
Cc: Matthew Garrett <mjg59@google.com>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Cc: stable@vger.kernel.org # v5.3
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions