[RFC PATCH 0/3] eficonfig: add UEFI Secure Boot key maintenance interface
Masahisa Kojima
masahisa.kojima at linaro.org
Sun Jun 19 07:20:19 CEST 2022
This series adds the UEFI Secure Boot key maintenance interface
to the eficonfig command.
User can enroll and delete the PK, KEK, db and dbx.
Note that this series is RFC since this series is implemented
on the top of the "enable menu-driven UEFI variable maintenance"
patch series still under review[1].
[1]https://lore.kernel.org/u-boot/20220619045607.1669-1-masahisa.kojima@linaro.org/T/#m7fe16b6044fbb2947b49c26051563c7cbb696fb3
Source code can be cloned with:
$ git clone https://git.linaro.org/people/masahisa.kojima/u-boot.git -b kojima/kojima/efi_seckey_menu_upstream_v1_0619
Masahisa Kojima (3):
eficonfig: add UEFI Secure Boot Key enrollment interface
eficonfig: add "Show Signature Database" menu entry
eficonfig: add "Delete Key" menu entry
cmd/Makefile | 3 +
cmd/eficonfig.c | 3 +
cmd/eficonfig_sbkey.c | 701 ++++++++++++++++++++++++++++++++++++++++++
include/efi_config.h | 3 +
4 files changed, 710 insertions(+)
create mode 100644 cmd/eficonfig_sbkey.c
--
2.17.1
More information about the U-Boot
mailing list