Branch: refs/heads/master
Home: https://github.com/tianocore/edk2
Commit: 134fbd552cbd808df8d9369c03abd88daa0d0e20
https://github.com/tianocore/edk2/commit/134fbd552cbd808df8d9369c03abd88daa0d0e20
Author: Kun Qin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
A SecurityPkg/Include/UefiSecureBoot.h
Log Message:
-----------
SecurityPkg: UefiSecureBoot: Definitions of cert and payload structures
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3910
This change added certificate and payload structures that can be consumed
by SecureBootVariableLib and other Secure Boot related operations.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: d6bee54c45b32546f19209f571d2ce59ed42bc23
https://github.com/tianocore/edk2/commit/d6bee54c45b32546f19209f571d2ce59ed42bc23
Author: Kun Qin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
A SecurityPkg/Include/Library/PlatformPKProtectionLib.h
A
SecurityPkg/Library/PlatformPKProtectionLibVarPolicy/PlatformPKProtectionLibVarPolicy.c
A
SecurityPkg/Library/PlatformPKProtectionLibVarPolicy/PlatformPKProtectionLibVarPolicy.inf
M SecurityPkg/SecurityPkg.dec
M SecurityPkg/SecurityPkg.dsc
Log Message:
-----------
SecurityPkg: PlatformPKProtectionLib: Added PK protection interface
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3911
This patch provides an abstracted interface for platform to implement PK
variable related protection interface, which is designed to be used when
PK variable is about to be changed by UEFI firmware.
This change also provided a variable policy based library implementation
to accomodate platforms that supports variable policy for variable
protections.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: 56c717aafa037f8d1fa3ef8c7cf7f4de91c2575e
https://github.com/tianocore/edk2/commit/56c717aafa037f8d1fa3ef8c7cf7f4de91c2575e
Author: Kun Qin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
M SecurityPkg/Include/Library/SecureBootVariableLib.h
M SecurityPkg/Library/SecureBootVariableLib/SecureBootVariableLib.c
M SecurityPkg/Library/SecureBootVariableLib/SecureBootVariableLib.inf
Log Message:
-----------
SecurityPkg: SecureBootVariableLib: Updated time based payload creator
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3909
This change updated the interface of 'CreateTimeBasedPayload' by
requiring the caller to provide a timestamp, instead of relying on time
protocol to be ready during runtime. It intends to extend the library
availability during boot environment.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: 6de7c084dbb6d02f3b8cdb68dc4716df96c6758f
https://github.com/tianocore/edk2/commit/6de7c084dbb6d02f3b8cdb68dc4716df96c6758f
Author: kuqin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
M SecurityPkg/Include/Library/SecureBootVariableLib.h
M SecurityPkg/Library/SecureBootVariableLib/SecureBootVariableLib.c
M SecurityPkg/Library/SecureBootVariableLib/SecureBootVariableLib.inf
Log Message:
-----------
SecurityPkg: SecureBootVariableLib: Updated signature list creator
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3910
This change removes the interface of SecureBootFetchData, and replaced
it with `SecureBootCreateDataFromInput`, which will require caller to
prepare available certificates in defined structures.
This improvement will eliminate the dependency of reading from FV,
extending the availability of this library instance.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: 6eb407947592e084110a124be089bef167af1383
https://github.com/tianocore/edk2/commit/6eb407947592e084110a124be089bef167af1383
Author: kuqin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
M SecurityPkg/Include/Library/SecureBootVariableLib.h
M SecurityPkg/Library/SecureBootVariableLib/SecureBootVariableLib.c
M SecurityPkg/Library/SecureBootVariableLib/SecureBootVariableLib.inf
Log Message:
-----------
SecurityPkg: SecureBootVariableLib: Added newly supported interfaces
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3911
This change updated the interfaces provided by SecureBootVariableLib.
The new additions provided interfaces to enroll single authenticated
variable from input, a helper function to query secure boot status,
enroll all secure boot variables from UefiSecureBoot.h defined data
structures, a as well as a routine that deletes all secure boot related
variables.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: fe73e9cd8952083a23b26b2eeb705fc2c2758f32
https://github.com/tianocore/edk2/commit/fe73e9cd8952083a23b26b2eeb705fc2c2758f32
Author: Kun Qin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
M
SecurityPkg/Library/SecureBootVariableProvisionLib/SecureBootVariableProvisionLib.c
Log Message:
-----------
SecurityPkg: SecureBootVariableProvisionLib: Updated implementation
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3910
This change is in pair with the previous SecureBootVariableLib, which
removes the explicit invocation of `CreateTimeBasedPayload` and used new
interface `EnrollFromInput` instead.
The original `SecureBootFetchData` is also moved to this library and
incorporated with the newly defined `SecureBootCreateDataFromInput` to
keep the original code flow.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: d2a0f379d5bde58861345280177a5c809a021e01
https://github.com/tianocore/edk2/commit/d2a0f379d5bde58861345280177a5c809a021e01
Author: Kun Qin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
M SecurityPkg/EnrollFromDefaultKeysApp/EnrollFromDefaultKeysApp.c
M
SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigImpl.c
M
SecurityPkg/VariableAuthenticated/SecureBootDefaultKeysDxe/SecureBootDefaultKeysDxe.c
Log Message:
-----------
SecurityPkg: Secure Boot Drivers: Added common header files
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3910
This change added common header files to consumer drivers to unblock
pipeline builds.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: 5678ebb42b5137556b8d62dd8a3c5779d5a21a48
https://github.com/tianocore/edk2/commit/5678ebb42b5137556b8d62dd8a3c5779d5a21a48
Author: Kun Qin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
M
SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf
M
SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigImpl.c
Log Message:
-----------
SecurityPkg: SecureBootConfigDxe: Updated invocation pattern
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3909
This change is in pair with the previous SecureBootVariableLib change,
which updated the interface of `CreateTimeBasedPayload`.
This change added a helper function to query the current time through
Real Time Clock protocol. This function is used when needing to format
an authenticated variable payload.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: dbc4e3675f507b2c6df4bd2a0f5bdba37ff0d54c
https://github.com/tianocore/edk2/commit/dbc4e3675f507b2c6df4bd2a0f5bdba37ff0d54c
Author: kuqin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
A
SecurityPkg/Library/SecureBootVariableLib/UnitTest/MockPlatformPKProtectionLib.c
A
SecurityPkg/Library/SecureBootVariableLib/UnitTest/MockPlatformPKProtectionLib.inf
A SecurityPkg/Library/SecureBootVariableLib/UnitTest/MockUefiLib.c
A SecurityPkg/Library/SecureBootVariableLib/UnitTest/MockUefiLib.inf
A
SecurityPkg/Library/SecureBootVariableLib/UnitTest/MockUefiRuntimeServicesTableLib.c
A
SecurityPkg/Library/SecureBootVariableLib/UnitTest/MockUefiRuntimeServicesTableLib.inf
A
SecurityPkg/Library/SecureBootVariableLib/UnitTest/SecureBootVariableLibUnitTest.c
A
SecurityPkg/Library/SecureBootVariableLib/UnitTest/SecureBootVariableLibUnitTest.inf
M SecurityPkg/SecurityPkg.ci.yaml
A SecurityPkg/Test/SecurityPkgHostTest.dsc
Log Message:
-----------
SecurityPkg: SecureBootVariableLib: Added unit tests
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3911
This change added unit test and enabled it from pipeline for the updated
SecureBootVariableLib.
The unit test covers all implemented interfaces and certain corner cases.
Cc: Jiewen Yao <[email protected]>
Cc: Jian J Wang <[email protected]>
Cc: Min Xu <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: 152e37cc5ad003394530fba905f08ea803817026
https://github.com/tianocore/edk2/commit/152e37cc5ad003394530fba905f08ea803817026
Author: Kun Qin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
M OvmfPkg/Bhyve/BhyveX64.dsc
M OvmfPkg/CloudHv/CloudHvX64.dsc
M OvmfPkg/IntelTdx/IntelTdxX64.dsc
M OvmfPkg/OvmfPkgIa32.dsc
M OvmfPkg/OvmfPkgIa32X64.dsc
M OvmfPkg/OvmfPkgX64.dsc
Log Message:
-----------
OvmfPkg: Pipeline: Resolve SecureBootVariableLib dependency
The new changes in SecureBootVariableLib brought in a new dependency of
PlatformPKProtectionLib.
This change added the new library instance from SecurityPkg to resolve
pipeline builds.
Cc: Ard Biesheuvel <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Jordan Justen <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Cc: Rebecca Cran <[email protected]>
Cc: Peter Grehan <[email protected]>
Cc: Sebastien Boeuf <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Commit: f193b945eac58ca379d3d21c77d5550b063580d6
https://github.com/tianocore/edk2/commit/f193b945eac58ca379d3d21c77d5550b063580d6
Author: Kun Qin <[email protected]>
Date: 2022-07-07 (Thu, 07 Jul 2022)
Changed paths:
M EmulatorPkg/EmulatorPkg.dsc
Log Message:
-----------
EmulatorPkg: Pipeline: Resolve SecureBootVariableLib dependency
The new changes in SecureBootVariableLib brought in a new dependency of
PlatformPKProtectionLib.
This change added the new library instance from SecurityPkg to resolve
pipeline builds.
Cc: Andrew Fish <[email protected]>
Cc: Ray Ni <[email protected]>
Signed-off-by: Kun Qin <[email protected]>
Reviewed-by: Ray Ni <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Acked-by: Michael Kubacki <[email protected]>
Compare: https://github.com/tianocore/edk2/compare/e1eef3a8b01a...f193b945eac5
_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits
