]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Allow no_hash to appear in manifest.
authorsjg <sjg@FreeBSD.org>
Tue, 23 Apr 2019 20:25:25 +0000 (20:25 +0000)
committersjg <sjg@FreeBSD.org>
Tue, 23 Apr 2019 20:25:25 +0000 (20:25 +0000)
commit4bdfbfc105aee5e07594f4f3b4c2179695f3f275
treeba79fbf4b09eb78cd7e579a5762f089ac20716b3
parent5532ebf392a0ed844d92cdd0ec8df650d6e22ea4
Allow no_hash to appear in manifest.

sbin/veriexec will ignore entries that have no hash anyway,
but loader needs to be explicitly told that such files are
ok to ignore (not verify).

We will report as Unverified depending on verbose level,
but with no reason - because we are not rejecting the file.

Reviewed by: imp, mindal_semihalf
Sponsored by:   Juniper Networks
MFC After: 1 week
Differential Revision: https://reviews.freebsd.org//D20018
lib/libsecureboot/h/libsecureboot.h
lib/libsecureboot/vectx.c
lib/libsecureboot/veopen.c
lib/libsecureboot/verify_file.c