On 24 January 2017 at 17:15, Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> wrote: > On 11 January 2017 at 15:05, Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> wrote: >> On 11 January 2017 at 15:01, Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx> wrote: >>> On Thu, 08 Dec, at 12:30:08PM, David Howells wrote: >>>> >>>> Here's a set of patches that can determine the secure boot state of the >>>> UEFI BIOS and pass that along to the main kernel image. This involves >>>> generalising ARM's efi_get_secureboot() function and making it mixed-mode >>>> safe. >>> >>> This version looks OK to me apart from the couple of comments I made. >>> >>> Ard, did you take a look? In particular some boot testing on ARM/arm64 >>> would be useful. x86 boots fine in both regular and mixed mode but >>> I've only tested without Secure Boot enabled. >> >> I did take a look at these patches (and commented on them) as they >> were coming in, but I haven't yet gone through them as thoroughly as I >> should. I will test them on ARM/arm64 as well. > > Apologies for the tardiness. I intend to look into these tomorrow. These patches build and run fine on arm, including on secure boot systems, so I don't have any objections. Once the open discussion points re x86 are resolved, I can proceed and merge them if desired. Matt? -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
