1) Backlog review

https://github.com/orgs/tianocore/projects/10/views/1

No new issues.

2) Old issue refresh

2.1) https://github.com/tianocore/edk2/issues/12561 ( 
https://github.com/tianocore/edk2/issues/12561 )
Review https://github.com/Flickdm/UEFI-Specification-Release/pull/1
*AR: Doug* to double check term "classic algorithm"

2.2) https://github.com/tianocore/edk2/issues/12706
Review https://github.com/jyao1/UEFI-Specification-Release/pull/19 
*AR: Jiewen* to change "a caller may evaluate hash entries in *AllowedDb* 
directly" to "a caller should ..."

2.3) https://github.com/tianocore/edk2/issues/12688 

It seems IEIT is a possible implementation to meet EU-CRA requirement. 
Trending on keeping IEIT in UEFI spec and leave it as an optional feature.
Although system cannot boot if only one bootloader is present and this 
bootloader fails the verification, system can continue if there is second 
bootloader. Then the second bootloader may check the IEIT info.

Open: Since we are deprecating Audit mode ( 
https://github.com/tianocore/edk2/issues/12525 ), the IEIT description is 
changed to "If the image’s signature is not found in the authorized database, 
or is found in the forbidden database, the image will not be started and 
instead, information about it will be placed in the 
EFI_IMAGE_EXECUTION_INFO_TABLE (see :ref:`image-execution-information-table`)."
See https://github.com/jyao1/UEFI-Specification-Release/pull/14
*AR: Peter* to double check if we need update the text to reflect the logging 
capability required in EU-CRA.

3) Some idea for image verification

https://github.com/microsoft/mu_basecore/pull/1809 ( 
https://github.com/microsoft/mu_basecore/pull/1809 ) 

Reviewed the test case design 
https://github.com/microsoft/mu_basecore/pull/1809#issuecomment-4836340530.
There is some confusion on ignoring the entry above trust anchor in DBX.
Jiewen provided feedback at 
https://github.com/microsoft/mu_basecore/pull/1809#issuecomment-4857385993.
*AR: Doug* to discuss internally.

Thank you
Yao, Jiewen


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#122020): https://edk2.groups.io/g/devel/message/122020
Mute This Topic: https://groups.io/mt/120077431/21656
Group Owner: [email protected]
Unsubscribe: https://edk2.groups.io/g/devel/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to