From: Ard Biesheuvel <ardb@kernel.org>
To: linux-efi@vger.kernel.org
Cc: ardb@kernel.org, Ingo Molnar <mingo@redhat.com>,
Thomas Gleixner <tglx@linutronix.de>,
Borislav Petkov <bp@alien8.de>
Subject: [GIT PULL] EFI updates for v5.11
Date: Tue, 17 Nov 2020 15:14:49 +0100 [thread overview]
Message-ID: <20201117141449.32674-1-ardb@kernel.org> (raw)
The following changes since commit 3650b228f83adda7e5ee532e2b90429c03f7b9ec:
Linux 5.10-rc1 (2020-10-25 15:14:11 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi.git efi-next-for-v5.11
for you to fetch changes up to b283477d394ac41ca59ee20eb9293ae9002eb1d7:
efi: x86/xen: switch to efi_get_secureboot_mode helper (2020-11-17 15:09:32 +0100)
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Borislav Petkov <bp@alien8.de>
----------------------------------------------------------------
EFI updates for v5.11:
- don't move BSS section around pointlessly (x86 decompressor)
- refactor helper for discovering the EFI secure boot mode
- wire up EFI secure boot to IMA for arm64
----------------------------------------------------------------
Ard Biesheuvel (1):
efi: x86/xen: switch to efi_get_secureboot_mode helper
Arvind Sankar (1):
efi/x86: Only copy the compressed kernel image in efi_relocate_kernel()
Chester Lin (3):
efi: generalize efi_get_secureboot
ima: generalize x86/EFI arch glue for other EFI architectures
arm64/ima: add ima_arch support
Geert Uytterhoeven (1):
efi/libstub: EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER should not default to yes
Heinrich Schuchardt (1):
efi/libstub/x86: simplify efi_is_native()
arch/arm64/Kconfig | 1 +
arch/x86/boot/compressed/Makefile | 2 +-
arch/x86/include/asm/efi.h | 5 ++-
arch/x86/kernel/Makefile | 2 -
arch/x86/xen/efi.c | 37 +++++-------------
drivers/firmware/efi/Kconfig | 2 +-
drivers/firmware/efi/libstub/efistub.h | 2 +
drivers/firmware/efi/libstub/secureboot.c | 44 ++++++++-------------
drivers/firmware/efi/libstub/x86-stub.c | 5 ++-
include/linux/efi.h | 23 ++++++++++-
security/integrity/ima/Makefile | 4 ++
.../ima_arch.c => security/integrity/ima/ima_efi.c | 45 ++++++----------------
12 files changed, 74 insertions(+), 98 deletions(-)
rename arch/x86/kernel/ima_arch.c => security/integrity/ima/ima_efi.c (60%)
reply other threads:[~2020-11-17 14:14 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201117141449.32674-1-ardb@kernel.org \
--to=ardb@kernel.org \
--cc=bp@alien8.de \
--cc=linux-efi@vger.kernel.org \
--cc=mingo@redhat.com \
--cc=tglx@linutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.