]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
loader: ignore some variable settings if input unverified
authorSimon J. Gerraty <sjg@FreeBSD.org>
Wed, 17 Jul 2019 23:33:14 +0000 (23:33 +0000)
committerSimon J. Gerraty <sjg@FreeBSD.org>
Wed, 17 Jul 2019 23:33:14 +0000 (23:33 +0000)
commitbbac74ca3c6b1d33f98f7eb01b24d70a2195bcc3
treef18e29a1ba04c5d31b47bc45c749adecc7b269bf
parent068ad27de345e8ebf10f87d54b1d7450718b1eec
loader: ignore some variable settings if input unverified

libsecureboot can tell us if the most recent file opened was
verfied or not.
If it's state is VE_UNVERIFIED_OK, skip if variable
matches one of the restricted prefixes.

Reviewed by: stevek
MFC after: 1 week
Sponsored by: Juniper Networks
Differential Revision: https://reviews.freebsd.org//D20909
stand/common/commands.c