The following changes since commit 3650b228f83adda7e5ee532e2b90429c03f7b9ec:
Linux 5.10-rc1 (2020-10-25 15:14:11 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi.git efi-next-for-v5.11
for you to fetch changes up to b283477d394ac41ca59ee20eb9293ae9002eb1d7:
efi: x86/xen: switch to efi_get_secureboot_mode helper (2020-11-17 15:09:32 +0100)
Cc: Ingo Molnar <mingo@xxxxxxxxxx>
Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
Cc: Borislav Petkov <bp@xxxxxxxxx>
----------------------------------------------------------------
EFI updates for v5.11:
- don't move BSS section around pointlessly (x86 decompressor)
- refactor helper for discovering the EFI secure boot mode
- wire up EFI secure boot to IMA for arm64
----------------------------------------------------------------
Ard Biesheuvel (1):
efi: x86/xen: switch to efi_get_secureboot_mode helper
Arvind Sankar (1):
efi/x86: Only copy the compressed kernel image in efi_relocate_kernel()
Chester Lin (3):
efi: generalize efi_get_secureboot
ima: generalize x86/EFI arch glue for other EFI architectures
arm64/ima: add ima_arch support
Geert Uytterhoeven (1):
efi/libstub: EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER should not default to yes
Heinrich Schuchardt (1):
efi/libstub/x86: simplify efi_is_native()
arch/arm64/Kconfig | 1 +
arch/x86/boot/compressed/Makefile | 2 +-
arch/x86/include/asm/efi.h | 5 ++-
arch/x86/kernel/Makefile | 2 -
arch/x86/xen/efi.c | 37 +++++-------------
drivers/firmware/efi/Kconfig | 2 +-
drivers/firmware/efi/libstub/efistub.h | 2 +
drivers/firmware/efi/libstub/secureboot.c | 44 ++++++++-------------
drivers/firmware/efi/libstub/x86-stub.c | 5 ++-
include/linux/efi.h | 23 ++++++++++-
security/integrity/ima/Makefile | 4 ++
.../ima_arch.c => security/integrity/ima/ima_efi.c | 45 ++++++----------------
12 files changed, 74 insertions(+), 98 deletions(-)
rename arch/x86/kernel/ima_arch.c => security/integrity/ima/ima_efi.c (60%)
