[GIT PULL] EFI updates for v5.11

[GIT PULL] EFI updates for v5.11

[Ard Biesheuvel]

The following changes since commit 3650b228f83adda7e5ee532e2b90429c03f7b9ec:

  Linux 5.10-rc1 (2020-10-25 15:14:11 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi.git efi-next-for-v5.11

for you to fetch changes up to b283477d394ac41ca59ee20eb9293ae9002eb1d7:

  efi: x86/xen: switch to efi_get_secureboot_mode helper (2020-11-17 15:09:32 +0100)

Cc: Ingo Molnar <mingo@redhat.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Borislav Petkov <bp@alien8.de>

----------------------------------------------------------------
EFI updates for v5.11:
- don't move BSS section around pointlessly (x86 decompressor)
- refactor helper for discovering the EFI secure boot mode
- wire up EFI secure boot to IMA for arm64

----------------------------------------------------------------
Ard Biesheuvel (1):
      efi: x86/xen: switch to efi_get_secureboot_mode helper

Arvind Sankar (1):
      efi/x86: Only copy the compressed kernel image in efi_relocate_kernel()

Chester Lin (3):
      efi: generalize efi_get_secureboot
      ima: generalize x86/EFI arch glue for other EFI architectures
      arm64/ima: add ima_arch support

Geert Uytterhoeven (1):
      efi/libstub: EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER should not default to yes

Heinrich Schuchardt (1):
      efi/libstub/x86: simplify efi_is_native()

 arch/arm64/Kconfig                                 |  1 +
 arch/x86/boot/compressed/Makefile                  |  2 +-
 arch/x86/include/asm/efi.h                         |  5 ++-
 arch/x86/kernel/Makefile                           |  2 -
 arch/x86/xen/efi.c                                 | 37 +++++-------------
 drivers/firmware/efi/Kconfig                       |  2 +-
 drivers/firmware/efi/libstub/efistub.h             |  2 +
 drivers/firmware/efi/libstub/secureboot.c          | 44 ++++++++-------------
 drivers/firmware/efi/libstub/x86-stub.c            |  5 ++-
 include/linux/efi.h                                | 23 ++++++++++-
 security/integrity/ima/Makefile                    |  4 ++
 .../ima_arch.c => security/integrity/ima/ima_efi.c | 45 ++++++----------------
 12 files changed, 74 insertions(+), 98 deletions(-)
 rename arch/x86/kernel/ima_arch.c => security/integrity/ima/ima_efi.c (60%)