Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Hi David, On Wed, May 24, 2017 at 03:45:25PM +0100, David Howells wrote: > Move the switch-statement in x86's setup_arch() that inteprets the > secure_boot boot parameter to generic code. > > Suggested-by: Ard Biesheuvel > Signed-off-by: David Howells

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Hi David, On Wed, May 24, 2017 at 03:45:25PM +0100, David Howells wrote: > Move the switch-statement in x86's setup_arch() that inteprets the > secure_boot boot parameter to generic code. > > Suggested-by: Ard Biesheuvel > Signed-off-by: David Howells I reviewed the context for this patch.

[PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Move the switch-statement in x86's setup_arch() that inteprets the secure_boot boot parameter to generic code. Suggested-by: Ard Biesheuvel Signed-off-by: David Howells --- arch/x86/kernel/setup.c | 14 +-

[PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Move the switch-statement in x86's setup_arch() that inteprets the secure_boot boot parameter to generic code. Suggested-by: Ard Biesheuvel Signed-off-by: David Howells --- arch/x86/kernel/setup.c | 14 +- drivers/firmware/efi/Kconfig | 23

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

On 24 May 2017 at 06:54, David Howells wrote: > Ard Biesheuvel wrote: > >> > + UEFI Secure Boot provides a mechanism for ensuring that the >> > firmware >> > + will only load signed bootloaders and kernels. Secure boot mode >> >

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

On 24 May 2017 at 06:54, David Howells wrote: > Ard Biesheuvel wrote: > >> > + UEFI Secure Boot provides a mechanism for ensuring that the >> > firmware >> > + will only load signed bootloaders and kernels. Secure boot mode >> > may >> > + be determined from EFI

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Ard Biesheuvel wrote: > > + UEFI Secure Boot provides a mechanism for ensuring that the > > firmware > > + will only load signed bootloaders and kernels. Secure boot mode > > may > > + be determined from EFI variables provided by the BIOS if

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Ard Biesheuvel wrote: > > + UEFI Secure Boot provides a mechanism for ensuring that the > > firmware > > + will only load signed bootloaders and kernels. Secure boot mode > > may > > + be determined from EFI variables provided by the BIOS if not > > Please replace

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

First of all, apologies for taking so long to respond. On 6 April 2017 at 13:49, David Howells wrote: > Move the switch-statement in x86's setup_arch() that inteprets the > secure_boot boot parameter to generic code. > > Suggested-by: Ard Biesheuvel

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

First of all, apologies for taking so long to respond. On 6 April 2017 at 13:49, David Howells wrote: > Move the switch-statement in x86's setup_arch() that inteprets the > secure_boot boot parameter to generic code. > > Suggested-by: Ard Biesheuvel > Signed-off-by: David Howells > --- > >

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Hi Ard, Any thoughts on these patches? Thanks, David

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Hi Ard, Any thoughts on these patches? Thanks, David

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Sorry, I forgot to include a cover note. These five patches would replace 1-3 & 6 from my Kernel Lockdown series. The additional patch moves the secure boot switch from x86 to generic code. David

Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Sorry, I forgot to include a cover note. These five patches would replace 1-3 & 6 from my Kernel Lockdown series. The additional patch moves the secure boot switch from x86 to generic code. David

[PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Move the switch-statement in x86's setup_arch() that inteprets the secure_boot boot parameter to generic code. Suggested-by: Ard Biesheuvel Signed-off-by: David Howells --- arch/x86/kernel/setup.c| 14 +-

[PATCH 1/5] efi: Move the x86 secure boot switch to generic code

Move the switch-statement in x86's setup_arch() that inteprets the secure_boot boot parameter to generic code. Suggested-by: Ard Biesheuvel Signed-off-by: David Howells --- arch/x86/kernel/setup.c| 14 +- drivers/firmware/efi/Kconfig | 23