Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move measurevariable #470

Merged
merged 5 commits into from
Feb 5, 2024

Conversation

Wenxing-hou
Copy link
Member

No description provided.

@Wenxing-hou Wenxing-hou marked this pull request as draft January 26, 2024 09:01
@Wenxing-hou Wenxing-hou force-pushed the move_measurevariable branch 2 times, most recently from 670ccfb to 7ce7bad Compare January 30, 2024 10:07
@Wenxing-hou Wenxing-hou marked this pull request as ready for review January 30, 2024 10:08
@@ -2333,6 +2334,36 @@ MeasureAllSecureVariables (
DEBUG ((DEBUG_INFO, "Skip measuring variable %s since it's deleted\n", EFI_IMAGE_SECURITY_DATABASE2));
}

//
// Meaurement UEFI device signature database
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please check AuthLib as well.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. I have added the measure.

#
## GUID used to specify section with devdb content
## Include/Guid/DeviceAuthentication.h
gEdkiiDeviceSignatureDatabaseGuid = {0xb9c2b4f4, 0xbf5f, 0x462d, {0x8a, 0xdf, 0xc5, 0xc7, 0xa, 0xc3, 0x5d, 0xad}}
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why use Edkii as prefix?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have fixed the name.

Status = MeasureVariable (
PCR_INDEX_FOR_SIGNATURE_DB,
EV_EFI_SPDM_DEVICE_POLICY,
EDKII_DEVICE_SECURITY_DATABASE,
Copy link

@Zhiqiang520 Zhiqiang520 Feb 2, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think here EDKII_DEVICE_SECURITY_DATABASE should be changed to EFI_DEVICE_SECURITY_DATABASE.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. I have fixed the name error.

…measure

Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Change gEdkiiDeviceSignatureDatabaseGuid and
EDKII_DEVICE_SECURITY_DATABASE prefix

Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
@jyao1 jyao1 merged commit 87090d3 into tianocore:DeviceSecurity Feb 5, 2024
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants