]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
loader: ignore some variable settings if input unverified
authorsjg <sjg@FreeBSD.org>
Wed, 17 Jul 2019 23:33:14 +0000 (23:33 +0000)
committersjg <sjg@FreeBSD.org>
Wed, 17 Jul 2019 23:33:14 +0000 (23:33 +0000)
commit78f217e836e4e741e65853527fb89d9029e7ce39
treef18e29a1ba04c5d31b47bc45c749adecc7b269bf
parent58d8ce329e6167f29a6b56e256f7a0c059bc432f
loader: ignore some variable settings if input unverified

libsecureboot can tell us if the most recent file opened was
verfied or not.
If it's state is VE_UNVERIFIED_OK, skip if variable
matches one of the restricted prefixes.

Reviewed by: stevek
MFC after: 1 week
Sponsored by: Juniper Networks
Differential Revision: https://reviews.freebsd.org//D20909
stand/common/commands.c