[PATCH v4 0/7] eficonfig: add UEFI Secure Boot key maintenance interface

Masahisa Kojima masahisa.kojima at linaro.org
Mon Oct 24 06:47:57 CEST 2022


This series adds the UEFI Secure Boot key maintenance interface
to the eficonfig command.
User can enroll and delete the PK, KEK, db and dbx.

Source code can be cloned with:
$ git clone https://git.linaro.org/people/masahisa.kojima/u-boot.git -b kojima/eficonfig_sbkey_v4

I'm aware of Simon's refactoring for common/menu.c, but this series is based
on the current U-Boot/master.

[Major Changes]
- add menu entry accessor with '&' followed by title
- add CONFIG_EFI_MM_COMM_TEE dependency

Masahisa Kojima (7):
  eficonfig: refactor eficonfig_select_file_handler()
  eficonfig: expose append entry function
  eficonfig: add direct menu entry access mode
  eficonfig: add direct menu entry access in change boot order
  eficonfig: add UEFI Secure Boot Key enrollment interface
  eficonfig: add "Show/Delete Signature Database" menu entry
  test/py: eficonfig: use direct menu entry access mode

 cmd/Makefile                                  |   5 +
 cmd/eficonfig.c                               | 331 ++++++--
 cmd/eficonfig_sbkey.c                         | 751 ++++++++++++++++++
 common/menu.c                                 |   3 +
 include/efi_config.h                          |  13 +
 include/menu.h                                |   1 +
 .../py/tests/test_eficonfig/test_eficonfig.py | 178 ++---
 7 files changed, 1089 insertions(+), 193 deletions(-)
 create mode 100644 cmd/eficonfig_sbkey.c

-- 
2.17.1



More information about the U-Boot mailing list