[edk2-devel] [PATCH] Pkg-Module: Add dbr to code definition

["Isaac Liang" <isaac.liang@hpe.com>]

dbr and dbrDefault has been defined UEFI Spec v2.9
Add them for further use

Signed-off-by: Isaac Liang <isaac.liang@hpe.com>
---
 MdePkg/Include/Guid/GlobalVariable.h      | 5 +++++
 MdePkg/Include/Guid/ImageAuthentication.h | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/MdePkg/Include/Guid/GlobalVariable.h b/MdePkg/Include/Guid/GlobalVariable.h
index eb6e5a043e..0df7e6ea48 100644
--- a/MdePkg/Include/Guid/GlobalVariable.h
+++ b/MdePkg/Include/Guid/GlobalVariable.h
@@ -167,6 +167,11 @@ extern EFI_GUID  gEfiGlobalVariableGuid;
 ///
 #define EFI_DBT_DEFAULT_VARIABLE_NAME  L"dbtDefault"
 ///
+/// The OEM's default secure boot recovery signature store. Should be treated as read-only.
+/// Its attribute is BS+RT.
+///
+#define EFI_DBR_DEFAULT_VARIABLE_NAME  L"dbrDefault"
+///
 /// Allows the firmware to indicate supported features and actions to the OS.
 /// Its attribute is BS+RT.
 ///
diff --git a/MdePkg/Include/Guid/ImageAuthentication.h b/MdePkg/Include/Guid/ImageAuthentication.h
index f95255c0fb..af7a04fbd3 100644
--- a/MdePkg/Include/Guid/ImageAuthentication.h
+++ b/MdePkg/Include/Guid/ImageAuthentication.h
@@ -34,6 +34,11 @@
 /// for the timestamp signature database.
 ///
 #define EFI_IMAGE_SECURITY_DATABASE2  L"dbt"
+///
+/// Variable name with guid EFI_IMAGE_SECURITY_DATABASE_GUID
+/// for the recovery signature database.
+///
+#define EFI_IMAGE_SECURITY_DATABASE3  L"dbr"
 
 #define SECURE_BOOT_MODE_ENABLE   1
 #define SECURE_BOOT_MODE_DISABLE  0
-- 
2.43.0.windows.1



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#119559): https://edk2.groups.io/g/devel/message/119559
Mute This Topic: https://groups.io/mt/106627562/7686176
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io]
-=-=-=-=-=-=-=-=-=-=-=-