Re: [edk2-devel] [PATCH V2 1/1] OvmfPkg/AcpiPlatformDxe: Measure ACPI table from QEMU in TDVF

2023-01-18 Thread Gerd Hoffmann
On Tue, Jan 17, 2023 at 08:57:32PM +0800, Min Xu wrote: > From: Min M Xu > > https://bugzilla.tianocore.org/show_bug.cgi?id=4245 > > The ACPI tables are downloaded from QEMU. From the security perspective > they should be measured and extended before installation. So that they > can be audited l

[edk2-devel] [PATCH V2 1/1] OvmfPkg/AcpiPlatformDxe: Measure ACPI table from QEMU in TDVF

2023-01-17 Thread Min Xu
From: Min M Xu https://bugzilla.tianocore.org/show_bug.cgi?id=4245 The ACPI tables are downloaded from QEMU. From the security perspective they should be measured and extended before installation. So that they can be audited later. The measurement leverages the TpmMeasurementLib which is availa