]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Enable veriexec for loader
authorsjg <sjg@FreeBSD.org>
Tue, 26 Feb 2019 06:22:10 +0000 (06:22 +0000)
committersjg <sjg@FreeBSD.org>
Tue, 26 Feb 2019 06:22:10 +0000 (06:22 +0000)
commitba2d36703f8cfff1cc9e3906e974638107bad83e
treeba0fc50fe6cf389e8d7aa457da88abb4b94d6067
parentb6203121e97797f7e016616135983c4b9c581d02
Enable veriexec for loader

This relies on libbearssl and libsecureboot
to verify files read by loader in a maner equivalent
to how mac_veriexec

Note: disabled by default.
Use is initially expected to be by embeded vendors

Reviewed by: emaste, imp
Sponsored by: Juniper Networks
Differential Revision: D16336
18 files changed:
stand/common/boot.c
stand/common/bootstrap.h
stand/common/interp_forth.c
stand/common/interp_simple.c
stand/common/load_elf.c
stand/common/load_elf_obj.c
stand/common/module.c
stand/ficl/Makefile.depend
stand/ficl/ficl.h
stand/ficl/fileaccess.c
stand/ficl32/Makefile.depend
stand/i386/loader/Makefile.depend
stand/liblua/Makefile
stand/liblua/lstd.c
stand/libsa/Makefile
stand/libsa/Makefile.depend
stand/libsa32/Makefile.depend
stand/loader.mk