2022/09/07 #27

makubacki · 2022-09-14T18:22:30Z

makubacki
Sep 14, 2022
Maintainer

Do we want to maintain UEFI Spec compliance?

No.
We feel the UEFI Spec interface is out of touch with today's use cases. We would like to prototype what a refreshed interface looks like.

Main work areas decided upon:

@makubacki - Overall project management and direction
@apop5 & @makubacki - User-facing interface design
- @kenlautner - Considering how prior "UEFI variable policy" behavior maps into this solution
- Note: Examples of unit testing previously performed on "UEFI variable policy" is in the VariablePolicyFuncTestApp Readme.
@makubacki & @apop5 - Front-end responsibilities and implementation
- Define validation (business) logic
- @makubacki - Variable router
@os-d & @kenlautner - Firmware Volume Block (FVB) back-end implementation
@cfernald & @kuqin12 - Devise a plan on how to best abstract Trusted Execution Environments
- Note: We will also need an initial list of TEEs we should consider so the needs of those can be evaluated
@Flickdm - Ideas around variable authentication and Secure Boot Advanced Targeting (SBAT) requirements
- What would an ideal SBAT solution look like?