Reviewed-by: Maurice Ma <maurice...@intel.com> > -----Original Message----- > From: devel@edk2.groups.io <devel@edk2.groups.io> On Behalf Of Michael > Kubacki > Sent: Thursday, May 21, 2020 15:43 > To: devel@edk2.groups.io > Cc: Ma, Maurice <maurice...@intel.com>; Dong, Guo <guo.d...@intel.com>; > You, Benjamin <benjamin....@intel.com>; Bret Barkelew > <brbar...@microsoft.com> > Subject: [edk2-devel] [PATCH v3 08/14] UefiPayloadPkg: Add VariablePolicy > engine to UefiPayloadPkg platform > > From: Bret Barkelew <brbar...@microsoft.com> > > https://bugzilla.tianocore.org/show_bug.cgi?id=2522 > > Cc: Maurice Ma <maurice...@intel.com> > Cc: Guo Dong <guo.d...@intel.com> > Cc: Benjamin You <benjamin....@intel.com> > Cc: Bret Barkelew <brbar...@microsoft.com> > Signed-off-by: Michael Kubacki <michael.kuba...@microsoft.com> > --- > UefiPayloadPkg/UefiPayloadPkgIa32.dsc | 7 +++++++ > UefiPayloadPkg/UefiPayloadPkgIa32X64.dsc | 7 +++++++ > 2 files changed, 14 insertions(+) > > diff --git a/UefiPayloadPkg/UefiPayloadPkgIa32.dsc > b/UefiPayloadPkg/UefiPayloadPkgIa32.dsc > index d52945442e0e..472196d2c60e 100644 > --- a/UefiPayloadPkg/UefiPayloadPkgIa32.dsc > +++ b/UefiPayloadPkg/UefiPayloadPkgIa32.dsc > @@ -4,6 +4,7 @@ > # Provides drivers and definitions to create uefi payload for bootloaders. > # > # Copyright (c) 2014 - 2019, Intel Corporation. All rights reserved.<BR> > +# Copyright (c) Microsoft Corporation.<BR> > # SPDX-License-Identifier: BSD-2-Clause-Patent # ## @@ -204,6 +205,8 @@ > [LibraryClasses] > > AuthVariableLib|MdeModulePkg/Library/AuthVariableLibNull/AuthVariableLib > Null.inf > > TpmMeasurementLib|MdeModulePkg/Library/TpmMeasurementLibNull/Tpm > MeasurementLibNull.inf > VarCheckLib|MdeModulePkg/Library/VarCheckLib/VarCheckLib.inf > + > + VariablePolicyLib|MdeModulePkg/Library/VariablePolicyLib/VariablePolic > + yLib.inf > + VariablePolicyHelperLib|MdeModulePkg/Library/VariablePolicyHelperLib/V > + ariablePolicyHelperLib.inf > > [LibraryClasses.IA32.SEC] > DebugLib|MdePkg/Library/BaseDebugLibNull/BaseDebugLibNull.inf > @@ -251,6 +254,7 @@ [LibraryClasses.common.DXE_RUNTIME_DRIVER] > HobLib|MdePkg/Library/DxeHobLib/DxeHobLib.inf > > MemoryAllocationLib|MdePkg/Library/UefiMemoryAllocationLib/UefiMemory > AllocationLib.inf > > ReportStatusCodeLib|MdeModulePkg/Library/RuntimeDxeReportStatusCodeLib > /RuntimeDxeReportStatusCodeLib.inf > + > + VariablePolicyLib|MdeModulePkg/Library/VariablePolicyLib/VariablePolic > + yLibRuntimeDxe.inf > > > [LibraryClasses.common.UEFI_DRIVER,LibraryClasses.common.UEFI_APPLICATI > ON] > PcdLib|MdePkg/Library/DxePcdLib/DxePcdLib.inf > @@ -329,6 +333,9 @@ [PcdsPatchableInModule.common] > > > gUefiCpuPkgTokenSpaceGuid.PcdCpuMaxLogicalProcessorNumber|$(MAX_LO > GICAL_PROCESSORS) > > + # Optional: Omit if VariablePolicy should be always-on. > + > + > gEfiMdeModulePkgTokenSpaceGuid.PcdAllowVariablePolicyEnforcementDisabl > + e|TRUE > + > > > ################################################################ > ################ > # > diff --git a/UefiPayloadPkg/UefiPayloadPkgIa32X64.dsc > b/UefiPayloadPkg/UefiPayloadPkgIa32X64.dsc > index 0736cd995476..817400604347 100644 > --- a/UefiPayloadPkg/UefiPayloadPkgIa32X64.dsc > +++ b/UefiPayloadPkg/UefiPayloadPkgIa32X64.dsc > @@ -4,6 +4,7 @@ > # Provides drivers and definitions to create uefi payload for bootloaders. > # > # Copyright (c) 2014 - 2019, Intel Corporation. All rights reserved.<BR> > +# Copyright (c) Microsoft Corporation.<BR> > # SPDX-License-Identifier: BSD-2-Clause-Patent # ## @@ -205,6 +206,8 @@ > [LibraryClasses] > > AuthVariableLib|MdeModulePkg/Library/AuthVariableLibNull/AuthVariableLib > Null.inf > > TpmMeasurementLib|MdeModulePkg/Library/TpmMeasurementLibNull/Tpm > MeasurementLibNull.inf > VarCheckLib|MdeModulePkg/Library/VarCheckLib/VarCheckLib.inf > + > + VariablePolicyLib|MdeModulePkg/Library/VariablePolicyLib/VariablePolic > + yLib.inf > + VariablePolicyHelperLib|MdeModulePkg/Library/VariablePolicyHelperLib/V > + ariablePolicyHelperLib.inf > > [LibraryClasses.IA32.SEC] > DebugLib|MdePkg/Library/BaseDebugLibNull/BaseDebugLibNull.inf > @@ -252,6 +255,7 @@ [LibraryClasses.common.DXE_RUNTIME_DRIVER] > HobLib|MdePkg/Library/DxeHobLib/DxeHobLib.inf > > MemoryAllocationLib|MdePkg/Library/UefiMemoryAllocationLib/UefiMemory > AllocationLib.inf > > ReportStatusCodeLib|MdeModulePkg/Library/RuntimeDxeReportStatusCodeLib > /RuntimeDxeReportStatusCodeLib.inf > + > + VariablePolicyLib|MdeModulePkg/Library/VariablePolicyLib/VariablePolic > + yLibRuntimeDxe.inf > > > [LibraryClasses.common.UEFI_DRIVER,LibraryClasses.common.UEFI_APPLICATI > ON] > PcdLib|MdePkg/Library/DxePcdLib/DxePcdLib.inf > @@ -331,6 +335,9 @@ [PcdsPatchableInModule.common] > > > gUefiCpuPkgTokenSpaceGuid.PcdCpuMaxLogicalProcessorNumber|$(MAX_LO > GICAL_PROCESSORS) > > + # Optional: Omit if VariablePolicy should be always-on. > + > + > gEfiMdeModulePkgTokenSpaceGuid.PcdAllowVariablePolicyEnforcementDisabl > + e|TRUE > + > > > ################################################################ > ################ > # > -- > 2.16.3.windows.1 > > >
-=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#60085): https://edk2.groups.io/g/devel/message/60085 Mute This Topic: https://groups.io/mt/74387418/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
