tyler.durden/audk
1
0
Fork 0
mirror of https://github.com/acidanthera/audk.git synced 2025-09-25 18:48:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

OvmfPkg/NvVarsFileLib: disable in case PcdBootRestrictToFirmware is set

Browse Source 
In case PcdBootRestrictToFirmware is set, disable loading EFI variables
from NvVars file.

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Ard Biesheuvel <ardb@kernel.org>
This commit is contained in:
Gerd Hoffmann 2023-05-05 07:17:25 +02:00 committed by Mikhail Krichanov
parent 8a2e91826d
commit eccc36b247
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
OvmfPkg/Library/NvVarsFileLib/NvVarsFileLib.c
View File

@ -30,7 +30,9 @@ ConnectNvVarsToFileSystem (
{ {
EFI_STATUS Status; EFI_STATUS Status;
if (FeaturePcdGet (PcdSecureBootSupported)) { if (FeaturePcdGet (PcdSecureBootSupported) ||
FeaturePcdGet (PcdBootRestrictToFirmware))
{
return EFI_UNSUPPORTED; return EFI_UNSUPPORTED;
} }

1
OvmfPkg/Library/NvVarsFileLib/NvVarsFileLib.inf
View File

@ -49,6 +49,7 @@
[Pcd] [Pcd]
gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported
gUefiOvmfPkgTokenSpaceGuid.PcdBootRestrictToFirmware
[Guids] [Guids]
gEfiFileInfoGuid gEfiFileInfoGuid