From: "Min Xu" <min.m.xu@intel.com>
To: Grzegorz Bernacki <gjb@semihalf.com>,
"devel@edk2.groups.io" <devel@edk2.groups.io>
Cc: "leif@nuviainc.com" <leif@nuviainc.com>,
"ardb+tianocore@kernel.org" <ardb+tianocore@kernel.org>,
"Samer.El-Haj-Mahmoud@arm.com" <Samer.El-Haj-Mahmoud@arm.com>,
"sunny.Wang@arm.com" <sunny.Wang@arm.com>,
"mw@semihalf.com" <mw@semihalf.com>,
"upstream@semihalf.com" <upstream@semihalf.com>,
"Yao, Jiewen" <jiewen.yao@intel.com>,
"Wang, Jian J" <jian.j.wang@intel.com>,
"lersek@redhat.com" <lersek@redhat.com>
Subject: Re: [PATCH v2 2/6] SecurityPkg: Create include file for default key content.
Date: Thu, 3 Jun 2021 07:06:22 +0000 [thread overview]
Message-ID: <PH0PR11MB5064CA70A35F567321828035C53C9@PH0PR11MB5064.namprd11.prod.outlook.com> (raw)
In-Reply-To: <20210601131229.630611-4-gjb@semihalf.com>
On Tuesday, June 1, 2021 9:12 PM, Grzegorz Bernacki Wrote:
> This commits add file which can be included by platform Flash Description
> File. It allows to specify certificate files, which will be embedded into binary
> file. The content of these files can be used to initialize Secure Boot default
> keys and databases.
>
> Signed-off-by: Grzegorz Bernacki <gjb@semihalf.com>
> ---
> SecurityPkg/SecureBootDefaultKeys.fdf.inc | 62 ++++++++++++++++++++
> 1 file changed, 62 insertions(+)
> create mode 100644 SecurityPkg/SecureBootDefaultKeys.fdf.inc
>
> diff --git a/SecurityPkg/SecureBootDefaultKeys.fdf.inc
> b/SecurityPkg/SecureBootDefaultKeys.fdf.inc
> new file mode 100644
> index 0000000000..056586b204
> --- /dev/null
> +++ b/SecurityPkg/SecureBootDefaultKeys.fdf.inc
> @@ -0,0 +1,62 @@
File header should be included, for example, the file description, Copyright, License, etc.
> +
> +!if $(DEFAULT_KEYS) == TRUE
> + FILE FREEFORM = 85254ea7-4759-4fc4-82d4-5eed5fb0a4a0 {
> + !ifdef $(PK_DEFAULT_FILE)
> + SECTION RAW = $(PK_DEFAULT_FILE)
> + !endif
> + SECTION UI = "PK Default"
> + }
> +
> + FILE FREEFORM = 6f64916e-9f7a-4c35-b952-cd041efb05a3 { !ifdef
> + $(KEK_DEFAULT_FILE1)
> + SECTION RAW = $(KEK_DEFAULT_FILE1)
> + !endif
> + !ifdef $(KEK_DEFAULT_FILE2)
> + SECTION RAW = $(KEK_DEFAULT_FILE2)
> + !endif
> + !ifdef $(KEK_DEFAULT_FILE3)
> + SECTION RAW = $(KEK_DEFAULT_FILE3)
> + !endif
> + SECTION UI = "KEK Default"
> + }
> +
> + FILE FREEFORM = c491d352-7623-4843-accc-2791a7574421 { !ifdef
> + $(DB_DEFAULT_FILE1)
> + SECTION RAW = $(DB_DEFAULT_FILE1)
> + !endif
> + !ifdef $(DB_DEFAULT_FILE2)
> + SECTION RAW = $(DB_DEFAULT_FILE2)
> + !endif
> + !ifdef $(DB_DEFAULT_FILE3)
> + SECTION RAW = $(DB_DEFAULT_FILE3)
> + !endif
> + SECTION UI = "DB Default"
> + }
> +
> + FILE FREEFORM = 36c513ee-a338-4976-a0fb-6ddba3dafe87 { !ifdef
> + $(DBT_DEFAULT_FILE1)
> + SECTION RAW = $(DBT_DEFAULT_FILE1)
> + !endif
> + !ifdef $(DBT_DEFAULT_FILE2)
> + SECTION RAW = $(DBT_DEFAULT_FILE2)
> + !endif
> + !ifdef $(DBT_DEFAULT_FILE3)
> + SECTION RAW = $(DBT_DEFAULT_FILE3)
> + !endif
> + SECTION UI = "DBT Default"
> + }
> +
> + FILE FREEFORM = 5740766a-718e-4dc0-9935-c36f7d3f884f { !ifdef
> + $(DBX_DEFAULT_FILE1)
> + SECTION RAW = $(DBX_DEFAULT_FILE1)
> + !endif
> + !ifdef $(DBX_DEFAULT_FILE2)
> + SECTION RAW = $(DBX_DEFAULT_FILE2)
> + !endif
> + !ifdef $(DBX_DEFAULT_FILE3)
> + SECTION RAW = $(DBX_DEFAULT_FILE3)
> + !endif
> + SECTION UI = "DBX Default"
> + }
> +
> +!endif
> --
> 2.25.1
next prev parent reply other threads:[~2021-06-03 7:06 UTC|newest]
Thread overview: 35+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-06-01 13:12 [PATCH v2 0/6] Secure Boot default keys Grzegorz Bernacki
2021-06-01 13:12 ` [edk2-platforms PATCH v2] Platform/RaspberryPi: Enable default Secure Boot variables initialization Grzegorz Bernacki
2021-06-02 17:40 ` [edk2-devel] " Pete Batard
2021-06-04 8:35 ` Sunny Wang
2021-07-08 18:37 ` Samer El-Haj-Mahmoud
2021-06-01 13:12 ` [PATCH v2 1/6] SecurityPkg: Create library for setting Secure Boot variables Grzegorz Bernacki
2021-06-02 17:39 ` [edk2-devel] " Pete Batard
2021-06-02 19:43 ` [EXTERNAL] " Bret Barkelew
2021-06-03 6:56 ` Min Xu
2021-06-04 7:49 ` Sunny Wang
2021-06-01 13:12 ` [PATCH v2 2/6] SecurityPkg: Create include file for default key content Grzegorz Bernacki
2021-06-02 17:39 ` [edk2-devel] " Pete Batard
2021-06-03 7:06 ` Min Xu [this message]
2021-06-04 8:11 ` Sunny Wang
2021-06-01 13:12 ` [PATCH v2 3/6] SecurityPkg: Add SecureBootDefaultKeysDxe driver Grzegorz Bernacki
2021-06-02 17:39 ` [edk2-devel] " Pete Batard
2021-06-04 8:02 ` Min Xu
2021-06-04 8:15 ` Sunny Wang
2021-06-01 13:12 ` [PATCH v2 4/6] SecurityPkg: Add EnrollFromDefaultKeys application Grzegorz Bernacki
2021-06-02 17:40 ` [edk2-devel] " Pete Batard
2021-06-02 19:38 ` [EXTERNAL] " Bret Barkelew
2021-06-04 8:24 ` Sunny Wang
2021-06-01 13:12 ` [PATCH v2 5/6] SecurityPkg: Add new modules to Security package Grzegorz Bernacki
2021-06-02 17:40 ` [edk2-devel] " Pete Batard
2021-06-04 8:09 ` Min Xu
2021-06-04 8:26 ` Sunny Wang
2021-06-01 13:12 ` [PATCH v2 6/6] SecurityPkg: Add option to reset secure boot keys Grzegorz Bernacki
2021-06-02 17:40 ` [edk2-devel] " Pete Batard
2021-06-04 8:30 ` Sunny Wang
2021-06-04 8:17 ` [PATCH v2 0/6] Secure Boot default keys Min Xu
2021-06-07 7:29 ` Grzegorz Bernacki
2021-06-14 9:47 ` Grzegorz Bernacki
2021-06-17 1:30 ` [edk2-devel] " Min Xu
2021-06-17 12:54 ` Grzegorz Bernacki
2021-06-17 13:37 ` Min Xu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-list from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=PH0PR11MB5064CA70A35F567321828035C53C9@PH0PR11MB5064.namprd11.prod.outlook.com \
--to=devel@edk2.groups.io \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox