[PATCH v4 5/5] loader/efi/linux: Use shim loader image handle where available

2025-06-19 Thread km
From: Mate Kukri Not reusing these handles will result in image measurements showing up twice in the event log. Signed-off-by: Mate Kukri --- grub-core/loader/efi/linux.c | 14 +- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/grub-core/loader/efi/linux.c b/grub-core

[PATCH v4 1/5] efi: Provide wrappers for load_image, start_image, unload_image

2025-06-19 Thread km
From: Julian Andres Klode These can be used to register a different implementation later, for example, when shim provides a protocol with those functions. Signed-off-by: Mate Kukri --- grub-core/kern/efi/efi.c | 57 ++ grub-core/loader/efi/chainloader.c |

[PATCH v4 2/5] efi/sb: Add support for the shim loader protocol

2025-06-19 Thread km
From: Mate Kukri Use loader protocol for image verification where available, otherwise fall back to the old shim lock protocol. Signed-off-by: Mate Kukri --- grub-core/kern/efi/sb.c | 59 grub-core/loader/efi/linux.c | 6 ++-- include/grub/efi/api.h

[PATCH v4 4/5] loader/efi/chainloader: Use shim loader image handle where available

2025-06-19 Thread km
From: Mate Kukri Not reusing these handles will result in image measurements showing up twice in the event log. Signed-off-by: Mate Kukri --- grub-core/loader/efi/chainloader.c | 21 + 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/grub-core/loader/efi/chain

[PATCH v4 3/5] efi/sb: Add API for retrieving shim loader image handles

2025-06-19 Thread km
From: Mate Kukri Not reusing these handles will result in image measurements showing up twice in the event log. Signed-off-by: Mate Kukri --- grub-core/kern/efi/sb.c | 25 - include/grub/efi/sb.h | 4 2 files changed, 28 insertions(+), 1 deletion(-) diff --git