]> git.ipfire.org Git - thirdparty/systemd.git/commit
boot: Rework shim image verification 24777/head
authorJan Janssen <medhefgo@web.de>
Fri, 14 Oct 2022 09:09:12 +0000 (11:09 +0200)
committerJan Janssen <medhefgo@web.de>
Mon, 17 Oct 2022 12:49:11 +0000 (14:49 +0200)
commit09da51f8e98c18278d27a3fddb006a6c75f3227c
treee2940f83a608fee632543c161cd7074ccbdf6078
parent6731a102da4b5827ae10355670c34396e89e265b
boot: Rework shim image verification

This moves the shim security arch override to the new
ReinstallProtocolInterface based interface. This also has the benefit to
reduce the time window in which we have this override active and also
actually removes it, which was not previously done.

The shim hooks themselves are also modernized too. The upcalls should
really not be neccessary if shim is happy with the provided binary.
src/boot/efi/boot.c
src/boot/efi/shim.c
src/boot/efi/shim.h