From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 2BBC5C02196 for ; Thu, 6 Feb 2025 06:24:26 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tfvJ0-0006RM-VW; Thu, 06 Feb 2025 01:24:07 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tfvIy-0006QJ-7m for grub-devel@gnu.org; Thu, 06 Feb 2025 01:24:04 -0500 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tfvIw-0000YB-7g for grub-devel@gnu.org; Thu, 06 Feb 2025 01:24:03 -0500 Received: from pps.filterd (m0353725.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 51620jw5032408; Thu, 6 Feb 2025 06:23:59 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s=pp1; bh=u01NVe APlc9Mik1TJ9NLV49uCz9EB9eXIQ67OCFuh+w=; b=jsjS/2rLljgYb8r/2+9xxZ s/RSCFWyXXMjhWNFHM3mTKwWBV4jxraiF7JzqASviUjyRVsWtEcvE44aHMAm0sKs E+18nhySAWqrnMoJiz97XQFjTsg9sgEjVtrv+X081qHfxTE+5DvYmmhGDTfFNklb YF8PmvJH+lXhDK4HqS0MLpltCLGy0XTqKhd3Ux8GZ/9/kyOkXEHcah6zsIZ/c2Oi 2u7w1e5vBvKkjLYvyqDhdnUDtPpgtI8+sfJD3zSiNHRfru9bsTJ14KMlUQJ21UYI y274dDY5ie7NMOgK7OqeyV2N1qKevIoCfvhawf6K0IiaeJ+OPMJFq64Ge+clj2tw == Received: from ppma23.wdc07v.mail.ibm.com (5d.69.3da9.ip4.static.sl-reverse.com [169.61.105.93]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 44mkwyry15-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 06 Feb 2025 06:23:58 +0000 (GMT) Received: from pps.filterd (ppma23.wdc07v.mail.ibm.com [127.0.0.1]) by ppma23.wdc07v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id 516462Mu006508; Thu, 6 Feb 2025 06:23:58 GMT Received: from smtprelay07.dal12v.mail.ibm.com ([172.16.1.9]) by ppma23.wdc07v.mail.ibm.com (PPS) with ESMTPS id 44hyekmpag-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 06 Feb 2025 06:23:57 +0000 Received: from smtpav06.dal12v.mail.ibm.com (smtpav06.dal12v.mail.ibm.com [10.241.53.105]) by smtprelay07.dal12v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 5166Nu2i27787934 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 6 Feb 2025 06:23:56 GMT Received: from smtpav06.dal12v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id B16C558043; Thu, 6 Feb 2025 06:23:56 +0000 (GMT) Received: from smtpav06.dal12v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 4D8D058055; Thu, 6 Feb 2025 06:23:56 +0000 (GMT) Received: from ltc.linux.ibm.com (unknown [9.5.196.140]) by smtpav06.dal12v.mail.ibm.com (Postfix) with ESMTP; Thu, 6 Feb 2025 06:23:56 +0000 (GMT) MIME-Version: 1.0 Date: Thu, 06 Feb 2025 11:53:56 +0530 From: Avnish Chouhan To: Sudhakar Kuppusamy Cc: grub-devel@gnu.org, dja@axtens.net, jan.setjeeilers@oracle.com, julian.klode@canonical.com, mate.kukri@canonical.com, pjones@redhat.com, stefanb@linux.ibm.com, nayna@linux.ibm.com, ssrish@linux.ibm.com, daniel.kiper@oracle.com Subject: Re: [PATCH v1 13/21] ieee1275: enter lockdown based on /ibm,secure-boot In-Reply-To: <20241218145647.1390837-14-sudhakar@linux.ibm.com> References: <20241218145647.1390837-1-sudhakar@linux.ibm.com> <20241218145647.1390837-14-sudhakar@linux.ibm.com> Message-ID: <28a00a923d88337c54d66b8b96920e50@linux.ibm.com> X-Sender: avnish@linux.ibm.com X-TM-AS-GCONF: 00 X-Proofpoint-ORIG-GUID: 9N51c1QIt05nDzNDAPXdR0dTeI4GjX-_ X-Proofpoint-GUID: 9N51c1QIt05nDzNDAPXdR0dTeI4GjX-_ X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1057,Hydra:6.0.680,FMLib:17.12.68.34 definitions=2025-02-06_01,2025-02-05_03,2024-11-22_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 mlxscore=0 bulkscore=0 clxscore=1015 priorityscore=1501 suspectscore=0 adultscore=0 malwarescore=0 spamscore=0 impostorscore=0 phishscore=0 lowpriorityscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2501170000 definitions=main-2502060048 Received-SPF: pass client-ip=148.163.158.5; envelope-from=avnish@linux.ibm.com; helo=mx0b-001b2d01.pphosted.com X-Spam_score_int: -26 X-Spam_score: -2.7 X-Spam_bar: -- X-Spam_report: (-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org T24gMjAyNC0xMi0xOCAyMDoyNiwgU3VkaGFrYXIgS3VwcHVzYW15IHdyb3RlOgo+IEZyb206IERh bmllbCBBeHRlbnMgPGRqYUBheHRlbnMubmV0Pgo+IAo+IElmIHRoZSAnaWJtLHNlY3VyZS1ib290 JyBwcm9wZXJ0eSBvZiB0aGUgcm9vdCBub2RlIGlzIDIgb3IgZ3JlYXRlciwKPiBlbnRlciBsb2Nr ZG93bi4KPiAKPiBTaWduZWQtb2ZmLWJ5OiBEYW5pZWwgQXh0ZW5zIDxkamFAYXh0ZW5zLm5ldD4K PiBTaWduZWQtb2ZmLWJ5OiBTdWRoYWthciBLdXBwdXNhbXkgPHN1ZGhha2FyQGxpbnV4LmlibS5j b20+Cj4gLS0tCj4gIGRvY3MvZ3J1Yi50ZXhpICAgICAgICAgICAgICAgICB8ICA0ICsrLS0KPiAg Z3J1Yi1jb3JlL01ha2VmaWxlLmNvcmUuZGVmICAgIHwgIDEgKwo+ICBncnViLWNvcmUva2Vybi9p ZWVlMTI3NS9pbml0LmMgfCAyOCArKysrKysrKysrKysrKysrKysrKysrKysrKysrCj4gIGluY2x1 ZGUvZ3J1Yi9sb2NrZG93bi5oICAgICAgICB8ICAzICsrLQo+ICA0IGZpbGVzIGNoYW5nZWQsIDMz IGluc2VydGlvbnMoKyksIDMgZGVsZXRpb25zKC0pCj4gCj4gZGlmZiAtLWdpdCBhL2RvY3MvZ3J1 Yi50ZXhpIGIvZG9jcy9ncnViLnRleGkKPiBpbmRleCBmNzFjZTlmZmMuLjZiNjM0ZjExMSAxMDA2 NDQKPiAtLS0gYS9kb2NzL2dydWIudGV4aQo+ICsrKyBiL2RvY3MvZ3J1Yi50ZXhpCj4gQEAgLTg5 NTksOCArODk1OSw4IEBAIHBsYXRmb3Jtcy4KPiAgQHNlY3Rpb24gTG9ja2Rvd24gd2hlbiBib290 aW5nIG9uIGEgc2VjdXJlIHNldHVwCj4gCj4gIFRoZSBHUlVCIGNhbiBiZSBsb2NrZWQgZG93biB3 aGVuIGJvb3RlZCBvbiBhIHNlY3VyZSBib290IGVudmlyb25tZW50LAo+IGZvciBleGFtcGxlCj4g LWlmIHRoZSBVRUZJIHNlY3VyZSBib290IGlzIGVuYWJsZWQuIE9uIGEgbG9ja2VkIGRvd24gY29u ZmlndXJhdGlvbiwKPiB0aGUgR1JVQiB3aWxsCj4gLWJlIHJlc3RyaWN0ZWQgYW5kIHNvbWUgb3Bl cmF0aW9ucy9jb21tYW5kcyBjYW5ub3QgYmUgZXhlY3V0ZWQuCj4gK2lmIFVFRkkgb3IgUG93ZXIg c2VjdXJlIGJvb3QgaXMgZW5hYmxlZC4gT24gYSBsb2NrZWQgZG93biAKPiBjb25maWd1cmF0aW9u LCB0aGUKPiArR1JVQiB3aWxsIGJlIHJlc3RyaWN0ZWQgYW5kIHNvbWUgb3BlcmF0aW9ucy9jb21t YW5kcyBjYW5ub3QgYmUgCj4gZXhlY3V0ZWQuCj4gCj4gIFRoZSBAc2FtcHtsb2NrZG93bn0gdmFy aWFibGUgaXMgc2V0IHRvIEBzYW1we3l9IHdoZW4gdGhlIEdSVUIgaXMgCj4gbG9ja2VkIGRvd24u Cj4gIE90aGVyd2lzZSBpdCBkb2VzIG5vdCBleGl0Lgo+IGRpZmYgLS1naXQgYS9ncnViLWNvcmUv TWFrZWZpbGUuY29yZS5kZWYgYi9ncnViLWNvcmUvTWFrZWZpbGUuY29yZS5kZWYKPiBpbmRleCA5 Y2Y0YTYwMDkuLjFlZDU1YjBlMyAxMDA2NDQKPiAtLS0gYS9ncnViLWNvcmUvTWFrZWZpbGUuY29y ZS5kZWYKPiArKysgYi9ncnViLWNvcmUvTWFrZWZpbGUuY29yZS5kZWYKPiBAQCAtMzMxLDYgKzMz MSw3IEBAIGtlcm5lbCA9IHsKPiAgICBwb3dlcnBjX2llZWUxMjc1ID0ga2Vybi9wb3dlcnBjL2Nh Y2hlLlM7Cj4gICAgcG93ZXJwY19pZWVlMTI3NSA9IGtlcm4vcG93ZXJwYy9kbC5jOwo+ICAgIHBv d2VycGNfaWVlZTEyNzUgPSBrZXJuL3Bvd2VycGMvY29tcGlsZXItcnQuUzsKPiArICBwb3dlcnBj X2llZWUxMjc1ID0ga2Vybi9sb2NrZG93bi5jOwo+IAo+ICAgIHNwYXJjNjRfaWVlZTEyNzUgPSBr ZXJuL3NwYXJjNjQvY2FjaGUuUzsKPiAgICBzcGFyYzY0X2llZWUxMjc1ID0ga2Vybi9zcGFyYzY0 L2RsLmM7Cj4gZGlmZiAtLWdpdCBhL2dydWItY29yZS9rZXJuL2llZWUxMjc1L2luaXQuYyAKPiBi L2dydWItY29yZS9rZXJuL2llZWUxMjc1L2luaXQuYwo+IGluZGV4IGRmYmQwYjg5OS4uNTk5ODRi NjA1IDEwMDY0NAo+IC0tLSBhL2dydWItY29yZS9rZXJuL2llZWUxMjc1L2luaXQuYwo+ICsrKyBi L2dydWItY29yZS9rZXJuL2llZWUxMjc1L2luaXQuYwo+IEBAIC00OSw2ICs0OSw3IEBACj4gICNp ZiBkZWZpbmVkKF9fcG93ZXJwY19fKSB8fCBkZWZpbmVkKF9faTM4Nl9fKQo+ICAjaW5jbHVkZSA8 Z3J1Yi9pZWVlMTI3NS9hbGxvYy5oPgo+ICAjZW5kaWYKPiArI2luY2x1ZGUgPGdydWIvbG9ja2Rv d24uaD4KPiAKPiAgLyogVGhlIG1heGltdW0gaGVhcCBzaXplIHdlJ3JlIGdvaW5nIHRvIGNsYWlt IGF0IGJvb3QuIE5vdCB1c2VkIGJ5IAo+IHNwYXJjLiAqLwo+ICAjaWZkZWYgX19pMzg2X18KPiBA QCAtOTUzLDYgKzk1NCwzMSBAQCBncnViX3BhcnNlX2NtZGxpbmUgKHZvaWQpCj4gICAgICB9Cj4g IH0KPiAKPiArc3RhdGljIHZvaWQKPiArZ3J1Yl9nZXRfaWVlZTEyNzVfc2VjdXJlX2Jvb3QgKHZv aWQpCj4gK3sKPiArICBncnViX2llZWUxMjc1X3BoYW5kbGVfdCByb290Owo+ICsgIGludCByYzsK PiArICBncnViX3VpbnQzMl90IGlzX3NiOwo+ICsKPiArICBncnViX2llZWUxMjc1X2ZpbmRkZXZp Y2UgKCIvIiwgJnJvb3QpOwoKSGksCgpGYWlsdXJlIGNoZWNrIGNvbmRpdGlvbiBpcyBtaXNzaW5n IQoKVGhhbmsgeW91LApBdm5pc2ggQ2hvdWhhbgoKPiArCj4gKyAgcmMgPSBncnViX2llZWUxMjc1 X2dldF9pbnRlZ2VyX3Byb3BlcnR5IChyb290LCAiaWJtLHNlY3VyZS1ib290IiwgCj4gJmlzX3Ni LAo+ICsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgc2l6ZW9mIChp c19zYiksIDApOwo+ICsKPiArICAvKgo+ICsgICAqIGlibSxzZWN1cmUtYm9vdDoKPiArICAgKiAw IC0gZGlzYWJsZWQKPiArICAgKiAxIC0gYXVkaXQKPiArICAgKiAyIC0gZW5mb3JjZQo+ICsgICAq IDMgLSBlbmZvcmNlICsgT1Mtc3BlY2lmaWMgYmVoYXZpb3VyCj4gKyAgICoKPiArICAgKiBXZSBv bmx5IHN1cHBvcnQgZW5mb3JjZS4KPiArICAgKi8KPiArICBpZiAocmMgPj0gMCAmJiBpc19zYiA+ PSAyKQo+ICsgICAgZ3J1Yl9sb2NrZG93biAoKTsKPiArfQo+ICsKPiAgZ3J1Yl9hZGRyX3QgZ3J1 Yl9tb2RiYXNlOwo+IAo+ICB2b2lkCj4gQEAgLTk3OCw2ICsxMDA0LDggQEAgZ3J1Yl9tYWNoaW5l X2luaXQgKHZvaWQpCj4gICNlbHNlCj4gICAgZ3J1Yl9pbnN0YWxsX2dldF90aW1lX21zIChncnVi X3J0Y19nZXRfdGltZV9tcyk7Cj4gICNlbmRpZgo+ICsKPiArICBncnViX2dldF9pZWVlMTI3NV9z ZWN1cmVfYm9vdCAoKTsKPiAgfQo+IAo+ICB2b2lkCj4gZGlmZiAtLWdpdCBhL2luY2x1ZGUvZ3J1 Yi9sb2NrZG93bi5oIGIvaW5jbHVkZS9ncnViL2xvY2tkb3duLmgKPiBpbmRleCA0MDUzMWZhODIu LmViZmVlNGJmMCAxMDA2NDQKPiAtLS0gYS9pbmNsdWRlL2dydWIvbG9ja2Rvd24uaAo+ICsrKyBi L2luY2x1ZGUvZ3J1Yi9sb2NrZG93bi5oCj4gQEAgLTI0LDcgKzI0LDggQEAKPiAgI2RlZmluZSBH UlVCX0xPQ0tET1dOX0RJU0FCTEVEICAgICAgIDAKPiAgI2RlZmluZSBHUlVCX0xPQ0tET1dOX0VO QUJMRUQgICAgICAgIDEKPiAKPiAtI2lmZGVmIEdSVUJfTUFDSElORV9FRkkKPiArI2lmIGRlZmlu ZWQoR1JVQl9NQUNISU5FX0VGSSkgfHwgXAo+ICsgICAgKGRlZmluZWQoX19wb3dlcnBjX18pICYm IGRlZmluZWQoR1JVQl9NQUNISU5FX0lFRUUxMjc1KSkKPiAgZXh0ZXJuIHZvaWQKPiAgRVhQT1JU X0ZVTkMgKGdydWJfbG9ja2Rvd24pICh2b2lkKTsKPiAgZXh0ZXJuIGludAoKX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KR3J1Yi1kZXZlbCBtYWlsaW5nIGxp c3QKR3J1Yi1kZXZlbEBnbnUub3JnCmh0dHBzOi8vbGlzdHMuZ251Lm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2dydWItZGV2ZWwK