[build] Mark compressed image tools as permitted for UEFI Secure Boot

Some older distributions (such as RHEL 8) provide their AArch64
kernels as gzip-compressed EFI binaries (with no self-decompressing
EFI stub present).  We therefore enable support for gzip images by
default for arm64 EFI builds.

Review the files used to implement the gzip (and zlib) formats and
mark these as permitted for UEFI Secure Boot.

Signed-off-by: Michael Brown <mcb30@ipxe.org>

diff --git a/src/core/archive.c b/src/core/archive.c
index 8b6accc6a1a8b1cfdd5f4ef2ee8e577462b778a4..ded79089a8ac7269870361a632de436260d05e20 100644 (file)
--- a/src/core/archive.c
+++ b/src/core/archive.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <string.h>
 #include <errno.h>

diff --git a/src/hci/commands/image_archive_cmd.c b/src/hci/commands/image_archive_cmd.c
index 6b907830e45a90b0c8d5c2636eb6165d20ab95aa..0410fceba0531acb2df9ce3b33fb716a02698c52 100644 (file)
--- a/src/hci/commands/image_archive_cmd.c
+++ b/src/hci/commands/image_archive_cmd.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <getopt.h>
 #include <ipxe/command.h>

diff --git a/src/image/gzip.c b/src/image/gzip.c
index 17ccd2492b37423c7ec407c6edce794e6b26680c..2a14cc79ad57e2b53cf8a43411cffe57000775ff 100644 (file)
--- a/src/image/gzip.c
+++ b/src/image/gzip.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdlib.h>
 #include <string.h>

diff --git a/src/image/zlib.c b/src/image/zlib.c
index f0f8f5622e6bec9c64e563244a0456b2c52f0714..aac67a19061a3903895b7f4ebfa9bb11b413216e 100644 (file)
--- a/src/image/zlib.c
+++ b/src/image/zlib.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdlib.h>
 #include <errno.h>

diff --git a/src/include/ipxe/gzip.h b/src/include/ipxe/gzip.h
index c8cf6414741a9b70a00a9b51e3ee3cea12b5e132..4d6666db171496b2e987afefddfc5c0c372f4d1c 100644 (file)
--- a/src/include/ipxe/gzip.h
+++ b/src/include/ipxe/gzip.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 #include <ipxe/image.h>

diff --git a/src/include/ipxe/zlib.h b/src/include/ipxe/zlib.h
index 3b0866bd1a3c34a7ace562769a0d6d54f91e9d4a..00cb3aeecb094357ce05bfd241a0edfcecd78e10 100644 (file)
--- a/src/include/ipxe/zlib.h
+++ b/src/include/ipxe/zlib.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 #include <byteswap.h>

diff --git a/src/include/usr/imgarchive.h b/src/include/usr/imgarchive.h
index bf0c18f55761964abba25ae1d3afd779480bc041..5a0057d27e57c140db0e7dd57b125276bfa74c9c 100644 (file)
--- a/src/include/usr/imgarchive.h
+++ b/src/include/usr/imgarchive.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/image.h>
 

diff --git a/src/usr/imgarchive.c b/src/usr/imgarchive.c
index 91600760e34e5bdc5a88d0354222807fbba23f12..e1109d8af8efb702d7b743193b90718d8efeafed 100644 (file)
--- a/src/usr/imgarchive.c
+++ b/src/usr/imgarchive.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdio.h>
 #include <string.h>