From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1760934AbdAKOvp (ORCPT ); Wed, 11 Jan 2017 09:51:45 -0500 Received: from mail-pg0-f41.google.com ([74.125.83.41]:32852 "EHLO mail-pg0-f41.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1757179AbdAKOvl (ORCPT ); Wed, 11 Jan 2017 09:51:41 -0500 Date: Wed, 11 Jan 2017 14:51:38 +0000 From: Matt Fleming To: David Howells Cc: ard.biesheuvel@linaro.org, linux-efi@vger.kernel.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, keyrings@vger.kernel.org, linux-arm-kernel@lists.infradead.org Subject: Re: [PATCH 8/8] efi: Add EFI_SECURE_BOOT bit [ver #6] Message-ID: <20170111145138.GB29649@codeblueprint.co.uk> References: <148120020832.5854.5448601415491330495.stgit@warthog.procyon.org.uk> <148120026820.5854.13036556358308461345.stgit@warthog.procyon.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <148120026820.5854.13036556358308461345.stgit@warthog.procyon.org.uk> User-Agent: Mutt/1.5.24+41 (02bc14ed1569) (2015-08-30) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 08 Dec, at 12:31:08PM, David Howells wrote: > From: Josh Boyer > > UEFI machines can be booted in Secure Boot mode. Add a EFI_SECURE_BOOT bit > that can be passed to efi_enabled() to find out whether secure boot is > enabled. > > This will be used by the SysRq+x handler, registered by the x86 arch, to find > out whether secure boot mode is enabled so that it can be disabled. > > Signed-off-by: Josh Boyer > Signed-off-by: David Howells > --- > > arch/x86/kernel/setup.c | 15 +++++++++++++++ > include/linux/efi.h | 1 + > 2 files changed, 16 insertions(+) Before we add more efi.flags bits I'd like this series to include the patch that makes use of EFI_SECURE_BOOT. Alternatively, you move this last patch to a new series.