[edk2-devel] [PATCH v3 17/28] SecurityPkg: Add Protected Variable Services

Min Xu min.m.xu at intel.com
Thu Jun 9 08:30:45 UTC 2022


On June 9, 2022 2:03 PM, Vang, Judah wrote:
> 
> REF: https://bugzilla.tianocore.org/show_bug.cgi?id=2594
> 
> V3: Change placement of buffer used for confidentiality crypto
> operation to fix an issue when enabling confidentiality. Remove
> un-needed increment of monotonic counter.
> 
> V1: Add Protected Variable Services across the different UEFI phases.
> Functions includes creating variable digest, performing integrity
> check, initializing protected variables, updating protected
> variables, and verifying the MetaDataHmacVar variable.
> This module prevents UEFI variable tampering.  It provides
> variable integrity and confidentiality.
> 
It seems there are 4 .inf in one patch and almost 6000 lines changes.
 - DxeProtectedVariableLib.inf
 - PeiProtectedVariableLib.inf
 - SmmProtectedVariableLib.inf
 - SmmRuntimeProtectedVariableLib.inf

Can these 4 .inf be split into 4 patches? So that it is easier for the community to review.

Thanks
Min




-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#90383): https://edk2.groups.io/g/devel/message/90383
Mute This Topic: https://groups.io/mt/91640198/1813853
Group Owner: devel+owner at edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [edk2-devel-archive at redhat.com]
-=-=-=-=-=-=-=-=-=-=-=-




More information about the edk2-devel-archive mailing list