mbox series

[v4,0/7] eficonfig: add UEFI Secure Boot key maintenance interface

Message ID 20221024044804.3351-1-masahisa.kojima@linaro.org
Headers show
Series eficonfig: add UEFI Secure Boot key maintenance interface | expand

Message

Masahisa Kojima Oct. 24, 2022, 4:47 a.m. UTC 
This series adds the UEFI Secure Boot key maintenance interface
to the eficonfig command.
User can enroll and delete the PK, KEK, db and dbx.

Source code can be cloned with:
$ git clone https://git.linaro.org/people/masahisa.kojima/u-boot.git -b kojima/eficonfig_sbkey_v4

I'm aware of Simon's refactoring for common/menu.c, but this series is based
on the current U-Boot/master.

[Major Changes]
- add menu entry accessor with '&' followed by title
- add CONFIG_EFI_MM_COMM_TEE dependency

Masahisa Kojima (7):
  eficonfig: refactor eficonfig_select_file_handler()
  eficonfig: expose append entry function
  eficonfig: add direct menu entry access mode
  eficonfig: add direct menu entry access in change boot order
  eficonfig: add UEFI Secure Boot Key enrollment interface
  eficonfig: add "Show/Delete Signature Database" menu entry
  test/py: eficonfig: use direct menu entry access mode

 cmd/Makefile                                  |   5 +
 cmd/eficonfig.c                               | 331 ++++++--
 cmd/eficonfig_sbkey.c                         | 751 ++++++++++++++++++
 common/menu.c                                 |   3 +
 include/efi_config.h                          |  13 +
 include/menu.h                                |   1 +
 .../py/tests/test_eficonfig/test_eficonfig.py | 178 ++---
 7 files changed, 1089 insertions(+), 193 deletions(-)
 create mode 100644 cmd/eficonfig_sbkey.c