de8cb45862
Get the firmware's secure-boot status in the kernel boot wrapper and stash it somewhere that the main kernel image can find. The efi_get_secureboot() function is extracted from the ARM stub and (a) generalised so that it can be called from x86 and (b) made to use efi_call_runtime() so that it can be run in mixed-mode. For x86, it is stored in boot_params and can be overridden by the boot loader or kexec. This allows secure-boot mode to be passed on to a new kernel. Suggested-by: Lukas Wunner <lukas@wunner.de> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Matt Fleming <matt@codeblueprint.co.uk> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: linux-efi@vger.kernel.org Link: http://lkml.kernel.org/r/1486380166-31868-5-git-send-email-ard.biesheuvel@linaro.org [ Small readability edits. ] Signed-off-by: Ingo Molnar <mingo@kernel.org> |
||
|---|---|---|
| .. | ||
| i386 | ||
| x86_64 | ||
| 00-INDEX | ||
| boot.txt | ||
| early-microcode.txt | ||
| earlyprintk.txt | ||
| entry_64.txt | ||
| exception-tables.txt | ||
| intel_mpx.txt | ||
| intel_rdt_ui.txt | ||
| kernel-stacks | ||
| mtrr.txt | ||
| pat.txt | ||
| protection-keys.txt | ||
| tlb.txt | ||
| topology.txt | ||
| usb-legacy-support.txt | ||
| zero-page.txt | ||