[28/30] efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
authorDavid Howells <dhowells@redhat.com>
Mon, 18 Feb 2019 12:45:03 +0000 (12:45 +0000)
committerBen Hutchings <benh@debian.org>
Wed, 29 Apr 2020 03:46:47 +0000 (04:46 +0100)
commitc8f5926e920cec757d2d7f3ba34277b32f96179f
tree03dae43cd269fb8ddf93324cb0249a3cb7dae8d9
parentd306be490e087177cf559e677f5720ebeaae96e6
[28/30] efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode

Origin: https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git/commit?id=a5d70c55c603233c192b375f72116a395909da28

UEFI machines can be booted in Secure Boot mode.  Add an EFI_SECURE_BOOT
flag that can be passed to efi_enabled() to find out whether secure boot is
enabled.

Move the switch-statement in x86's setup_arch() that inteprets the
secure_boot boot parameter to generic code and set the bit there.

Suggested-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
cc: linux-efi@vger.kernel.org
[rperier: Forward-ported to 5.5:
 - Use pr_warn()
 - Adjust context]
[bwh: Forward-ported to 5.6: adjust context]

Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
arch/x86/kernel/setup.c
drivers/firmware/efi/Makefile
drivers/firmware/efi/secureboot.c [new file with mode: 0644]
include/linux/efi.h