[Skiboot] [PATCH v5 01/20] libstb/secureboot: expose secureboot_enforce for later use in secvar

Eric Richter erichte at linux.ibm.com
Sat Jun 13 06:24:55 AEST 2020


This patch exposes the secureboot_enforce() function to unify any
system-halting behavior enacted by either firmware or OS secure boot.

Signed-off-by: Eric Richter <erichte at linux.ibm.com>
---
 libstb/secureboot.c | 2 +-
 libstb/secureboot.h | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/libstb/secureboot.c b/libstb/secureboot.c
index c8697216..60324809 100644
--- a/libstb/secureboot.c
+++ b/libstb/secureboot.c
@@ -27,7 +27,7 @@ static struct {
 	{ IBM_SECUREBOOT_V2, "ibm,secureboot-v2" },
 };
 
-static void secureboot_enforce(void)
+void secureboot_enforce(void)
 {
 	/* Sanity check */
 	if (!secure_mode)
diff --git a/libstb/secureboot.h b/libstb/secureboot.h
index 0792dd5a..721b28de 100644
--- a/libstb/secureboot.h
+++ b/libstb/secureboot.h
@@ -15,6 +15,7 @@ enum secureboot_version {
 	IBM_SECUREBOOT_V2,
 };
 
+void secureboot_enforce(void);
 bool secureboot_is_compatible(struct dt_node *node, int *version, const char **compat);
 void secureboot_init(void);
 
-- 
2.27.0



More information about the Skiboot mailing list