回复: VariablePolicy support in StandaloneMM

["gaoliming" <gaoliming@byosoft.com.cn>]

I just quick check. VarCheckPolicyLib doesn't consume DxeServicesLib. But, VarCheckPolicyLib library doesn't StandaloneMM type. 

So, I think StandaloneMM version VarCheckPolicyLib is required. 

Thanks
Liming
> -----邮件原件-----
> 发件人: Ard Biesheuvel <ard.biesheuvel@arm.com>
> 发送时间: 2020年12月2日 17:02
> 收件人: Masahisa Kojima <masahisa.kojima@linaro.org>;
> edk2-devel-groups-io <devel@edk2.groups.io>
> 抄送: Bret.Barkelew@microsoft.com; jian.j.wang@intel.com;
> hao.a.wu@intel.com; gaoliming@byosoft.com.cn; Sami Mujawar
> <sami.mujawar@arm.com>; jiewen.yao@intel.com; Laszlo Ersek
> <lersek@redhat.com>
> 主题: Re: VariablePolicy support in StandaloneMM
> 
> (+ Laszlo)
> 
> On 12/2/20 9:57 AM, Masahisa Kojima wrote:
> > Hello All,
> >
> > VariablePolicy was introduced in November.
> > When Developerbox(aarch64 platform) boots with UEFI secure boot
> enabled,
> > the following error appears.
> > Note that this platform supports UEFI secure boot using the standalone
> > MM framework.
> >
> > --- StandaloneMM log ---
> > VariableLockRequestToLock - Failed to lock variable CapsuleMax! Not Ready
> >
> > ASSERT_EFI_ERROR (Status = Not Ready)
> > ASSERT [VariableStandaloneMm]
> >
> /home/ubuntu/src/uefi/edk2/MdeModulePkg/Universal/Variable/RuntimeDx
> e/VariableLockRequestToLock.c(64):
> > !EFI_ERROR (Status)
> > MmEntryPoint Done
> > ---
> >
> > In my check, this is simply because
> >
> MdeModulePkg/Library/VariablePolicyLib/VariablePolicyLib.c::InitVariablePoli
> cyLib()
> > is not called.
> >
> > InitVariablePolicyLib() is called from the following two files.
> > ---
> >   MdeModulePkg/Library/VarCheckPolicyLib/VarCheckPolicyLib.c:
> Status
> > = InitVariablePolicyLib( VariableServiceGetVariable );
> >   MdeModulePkg/Universal/Variable/RuntimeDxe/VariableDxe.c:  Status
> =
> > InitVariablePolicyLib (VariableServiceGetVariable);
> > ---
> > VariableDxe.c is not for MM_STANDALONE, so I tried to use
> > "VarCheckPolicyLib" as VarCheckLib,
> > but "VarCheckPolicyLib" requires
> > DxeServicesLib|MdePkg/Library/DxeServicesLib/DxeServicesLib.inf and
> > DxeServicesLib.inf is not for MM_STANDALONE, I am stuck here.
> >
> > Could you please take a look at this error?
> >
> 
> Thanks for the report.
> 
> Bret, could you please suggest a fix here?