[Skiboot] [PATCH v6 01/20] libstb/secureboot: expose secureboot_enforce for later use in secvar
Eric Richter
erichte at linux.ibm.com
Thu Sep 17 02:21:12 AEST 2020
This patch exposes the secureboot_enforce() function to unify any
system-halting behavior enacted by either firmware or OS secure boot.
Signed-off-by: Eric Richter <erichte at linux.ibm.com>
---
libstb/secureboot.c | 2 +-
libstb/secureboot.h | 1 +
2 files changed, 2 insertions(+), 1 deletion(-)
diff --git a/libstb/secureboot.c b/libstb/secureboot.c
index c8697216..60324809 100644
--- a/libstb/secureboot.c
+++ b/libstb/secureboot.c
@@ -27,7 +27,7 @@ static struct {
{ IBM_SECUREBOOT_V2, "ibm,secureboot-v2" },
};
-static void secureboot_enforce(void)
+void secureboot_enforce(void)
{
/* Sanity check */
if (!secure_mode)
diff --git a/libstb/secureboot.h b/libstb/secureboot.h
index 0792dd5a..721b28de 100644
--- a/libstb/secureboot.h
+++ b/libstb/secureboot.h
@@ -15,6 +15,7 @@ enum secureboot_version {
IBM_SECUREBOOT_V2,
};
+void secureboot_enforce(void);
bool secureboot_is_compatible(struct dt_node *node, int *version, const char **compat);
void secureboot_init(void);
--
2.21.1
More information about the Skiboot
mailing list