mbox series

[v9,0/5] eficonfig: add UEFI Secure Boot key maintenance interface

Message ID 20221116102820.21021-1-masahisa.kojima@linaro.org
Headers show
Series eficonfig: add UEFI Secure Boot key maintenance interface | expand

Message

Masahisa Kojima Nov. 16, 2022, 10:28 a.m. UTC
This series adds the UEFI Secure Boot key maintenance interface
to the eficonfig command.
User can enroll PK, KEK, db and dbx.

Source code can be cloned with:
$ git clone https://git.linaro.org/people/masahisa.kojima/u-boot.git -b kojima/eficonfig_sbkey_v9

Masahisa Kojima (5):
  eficonfig: refactor file selection handling
  eficonfig: expose append entry function
  eficonfig: refactor change boot order implementation
  eficonfig: add UEFI Secure Boot Key enrollment interface
  eficonfig: add "Show Signature Database" menu entry

 cmd/Makefile                                  |   5 +
 cmd/eficonfig.c                               | 201 ++++----
 cmd/eficonfig_sbkey.c                         | 482 ++++++++++++++++++
 include/efi_config.h                          |  12 +-
 .../py/tests/test_eficonfig/test_eficonfig.py |   1 +
 5 files changed, 597 insertions(+), 104 deletions(-)
 create mode 100644 cmd/eficonfig_sbkey.c

Comments

Heinrich Schuchardt Nov. 17, 2022, 11:26 p.m. UTC | #1
On 11/16/22 11:28, Masahisa Kojima wrote:
> This series adds the UEFI Secure Boot key maintenance interface
> to the eficonfig command.
> User can enroll PK, KEK, db and dbx.
>
> Source code can be cloned with:
> $ git clone https://git.linaro.org/people/masahisa.kojima/u-boot.git -b kojima/eficonfig_sbkey_v9
>
> Masahisa Kojima (5):
>    eficonfig: refactor file selection handling
>    eficonfig: expose append entry function
>    eficonfig: refactor change boot order implementation
>    eficonfig: add UEFI Secure Boot Key enrollment interface
>    eficonfig: add "Show Signature Database" menu entry
>
>   cmd/Makefile                                  |   5 +
>   cmd/eficonfig.c                               | 201 ++++----
>   cmd/eficonfig_sbkey.c                         | 482 ++++++++++++++++++
>   include/efi_config.h                          |  12 +-
>   .../py/tests/test_eficonfig/test_eficonfig.py |   1 +
>   5 files changed, 597 insertions(+), 104 deletions(-)
>   create mode 100644 cmd/eficonfig_sbkey.c
>

The root directory of a FAT file system can have 512 or more entries.

When will you implement scrolling for the file list?

I would prefer if you could finish "Add Boot Option" before adding new
options which suffer from the same problem.

Best regards

Heinrich