]> git.ipfire.org Git - thirdparty/systemd.git/commit
stub: call inner kernel directly
authorValentin David <valentin.david@canonical.com>
Tue, 6 May 2025 12:34:14 +0000 (14:34 +0200)
committerValentin David <valentin.david@canonical.com>
Wed, 11 Jun 2025 11:04:53 +0000 (13:04 +0200)
commitcab9c7b5a42effa8a45611fc6b8556138c869b5f
treee959386cd6e45b80723c61136d80dc3daf396abf
parent114ad16c4dcac136fb7646866f8a95ee5631ee51
stub: call inner kernel directly

Since shim 16, it is not possible anymore to override the security arch
protocol to avoid signature check and measurements.

Also on Dell servers, EFI_SECURITY2_ARCH_PROTOCOL is not implemented, so
unexpected measurements on PCR 4 were still happening.

This just loads and run the kernel pe. We verify that there is no relocation
needed. Also for simplification, we assume and verify that the base address is
expected to be 0.
src/boot/boot.c
src/boot/device-path-util.c
src/boot/linux.c
src/boot/pe.c
src/boot/pe.h