<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="blue" vlink="#954F72"> <div class="WordSection1"> HI Bret<o:p></o:p> Thanks for the work. The design doc is very good.<o:p></o:p> <o:p> </o:p> Some feedback/questions below:<o:p></o:p> <o:p> </o:p> <ol style="margin-top:0in" start="1" type="1"> <li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo4">We have 2 variable related protocol – EDKII_VARIABLE_LOCK_PROTOCOL and EDKII_VAR_CHECK_PROTOCOL. Do you want to deprecate both? Or only deprecate EDKII_VARIABLE_LOCK_PROTOCOL?<o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo4">The Function – DumpVariablePolicy() – makes me confused in the beginning. In my thought, “Dump” means to show some debug message. But here, you want to return the policy. Can we change the name to GetVariablePolicy()?<o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo4">The function - DisableVariablePolicy(). Does it disable current policy engine? Does it disable any future policy engine? Does it block RegisterVariablePolicy() call?<o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo4">The function – LockVariablePolicy() – Can it lock the DisableVariablePolicy() call? <o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo4">The use case “In MFG Mode Variable Policy Engine is disabled, thus these VPD variables can be created. These variables are locked with lock policy type LockNow, so that these variables can’t be tampered with in Customer Mode.”<o:p></o:p></li></ol> This seems a perfect potential attack point. If the attacker wants to modify a read-only variable. He or she may trigger the MFG mode, then no variable is locked. Then the attacker can update the RO variable then reset the system to normal mode. Is that threat considered?<o:p></o:p> <o:p> </o:p> Thank you<o:p></o:p> Yao Jiewen<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> <a name="_____replyseparator"></a>From: devel@edk2.groups.io <devel@edk2.groups.io> On Behalf Of Bret Barkelew via Groups.Io Sent: Tuesday, February 4, 2020 4:08 PM To: devel@edk2.groups.io; rfc@edk2.groups.io Subject: Re: [edk2-devel] [RFC] VariablePolicy - Protocol, Libraries, and Implementation for VariableLock Alternative<o:p></o:p> </div> </div> <o:p> </o:p> Expanding the audience beyond the RFC list….<o:p></o:p> If no one has additional input, I’ll try to start formatting these as patches later this week. Thanks!<o:p></o:p> <o:p> </o:p> - Bret<o:p></o:p> <o:p> </o:p> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: <a href="mailto:Bret.Barkelew@microsoft.com">Bret Barkelew</a> Sent: Tuesday, January 28, 2020 5:36 PM To: <a href="mailto:rfc@edk2.groups.io">rfc@edk2.groups.io</a> Subject: [RFC] VariablePolicy - Protocol, Libraries, and Implementation for VariableLock Alternative<o:p></o:p> </div> <o:p> </o:p> All,<o:p></o:p> <o:p> </o:p> VariablePolicy is our proposal for an expanded “VarLock-like” interface to constrain and govern platform variables.<o:p></o:p> I brought this up back in May to get initial comments on the interface and implications of the interface and the approach. We implemented it in Mu over the summer and it is not our defacto variable solution. It plugs in easily to the existing variable infrastructure, but does want to control some of the things that are currently managed by VarLock.<o:p></o:p> <o:p> </o:p> There are also some tweaks that would be needed if this were desired to be 100% optional code, but that’s no different than the current VarLock implementation which has implementation code directly tied to some of the common variable code.<o:p></o:p> <o:p> </o:p> I’ve structured this RFC in two pieces:<o:p></o:p> <ul style="margin-top:0in" type="disc"> <li class="MsoListParagraph" style="margin-left:0in;mso-list:l2 level1 lfo3">The Core piece represents the minimum changes needed to implement Variable Policy and integrate it into Variable Services. It contains core driver code, central libraries and headers, and DXE driver for the protocol interface.<o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l2 level1 lfo3">The Extras piece contains recommended code for a full-feature implementation including a replacement for the VarLock protocol that enables existing code to continue functioning as-is. It also contains unit and integration tests. And as a bonus, it has a Rust implementation of the core business logic for Variable Policy.<o:p></o:p></li></ul> <o:p> </o:p> The code can be found in the following two branches:<o:p></o:p> <a href="https://github.com/corthon/edk2/tree/personal/brbarkel/var_policy_rfc_core">https://github.com/corthon/edk2/tree/personal/brbarkel/var_policy_rfc_core</a><o:p></o:p> <a href="https://github.com/corthon/edk2/tree/personal/brbarkel/var_policy_rfc_extra">https://github.com/corthon/edk2/tree/personal/brbarkel/var_policy_rfc_extra</a><o:p></o:p> <o:p> </o:p> A convenient way to see all the changes in one place is to look at a comparison:<o:p></o:p> <a href="https://github.com/corthon/edk2/compare/master...corthon:personal/brbarkel/var_policy_rfc_core">https://github.com/corthon/edk2/compare/master...corthon:personal/brbarkel/var_policy_rfc_core</a><o:p></o:p> <a href="https://github.com/corthon/edk2/compare/personal/brbarkel/var_policy_rfc_core...corthon:personal/brbarkel/var_policy_rfc_extra">https://github.com/corthon/edk2/compare/personal/brbarkel/var_policy_rfc_core...corthon:personal/brbarkel/var_policy_rfc_extra</a><o:p></o:p> <o:p> </o:p> There’s additional documentation in the PPT and DOC files in the core branch:<o:p></o:p> <a href="https://github.com/corthon/edk2/blob/personal/brbarkel/var_policy_rfc_core/RFC%20VariablePolicy%20Proposal%20Presentation.pptx">https://github.com/corthon/edk2/blob/personal/brbarkel/var_policy_rfc_core/RFC%20VariablePolicy%20Proposal%20Presentation.pptx</a> <a href="https://github.com/corthon/edk2/blob/personal/brbarkel/var_policy_rfc_core/RFC%20VariablePolicy%20Whitepaper.docx"> https://github.com/corthon/edk2/blob/personal/brbarkel/var_policy_rfc_core/RFC%20VariablePolicy%20Whitepaper.docx</a><o:p></o:p> (You’d need to download those to view.)<o:p></o:p> <o:p> </o:p> My ultimate intention for this is to submit it as a series of patches for acceptance into EDK2 as a replacement for VarLock. For now, I’m just looking for initial feedback on any broad changes that might be needed to get this into shape for more detailed code review on the devel list.<o:p></o:p> <o:p> </o:p> Thanks!<o:p></o:p> <o:p> </o:p> - Bret<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <div> </o:p> </div> </div> </body> </html> <div width="1" style="color:white;clear:both">_._,_._,_</div> <hr> Groups.io Links: You receive all messages sent to this group. <a target="_blank" href="https://edk2.groups.io/g/devel/message/53819">View/Reply Online (#53819)</a> | | <a target="_blank" href="https://groups.io/mt/70968478/1813853">Mute This Topic</a> | <a href="https://edk2.groups.io/g/devel/post">New Topic</a> <a href="https://edk2.groups.io/g/devel/editsub/1813853">Your Subscription</a> | <a href="mailto:devel+owner@edk2.groups.io">Contact Group Owner</a> | <a href="https://edk2.groups.io/g/devel/unsub">Unsubscribe</a> [edk2-devel-archive@redhat.com] <div width="1" style="color:white;clear:both">_._,_._,_</div>