xt-sys/exectos
xt-sys/exectos
3
5
Fork 3
Code Issues 3 Pull Requests 1 Actions Projects 1 Releases Wiki Activity

Implement BlEfiGetSecureBootStatus() to get SecureBoot status
All checks were successful
ci/woodpecker/push/build Pipeline was successful
Details

Browse Source
This commit is contained in:
Rafal Kupiec 2022-10-12 15:47:41 +02:00
parent da37ceaa0f
commit 09e58d0b67
Signed by: belliash
GPG Key ID: 4E829243E0CFE6B4
3 changed files with 42 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
xtldr/efiutil.c
View File

@ -162,6 +162,38 @@ BlDbgPrint(IN PUINT16 Format,
}
}
/**
* This routine checks whether SecureBoot is enabled or not.
*
* @return Numeric representation of SecureBoot status (0 = Disabled, >0 = Enabled, <0 SetupMode).
*
* @since XT 1.0
*/
INT_PTR
BlEfiGetSecureBootStatus()
{
EFI_GUID VarGuid = EFI_GLOBAL_VARIABLE_GUID;
INT_PTR SecureBootStatus = 0;
UCHAR VarValue = 0;
UINT_PTR Size;
Size = sizeof(VarValue);
if(EfiSystemTable->RuntimeServices->GetVariable(L"SecureBoot", &VarGuid,
NULL, &Size, &VarValue) == STATUS_EFI_SUCCESS)
{
SecureBootStatus = (INT_PTR)VarValue;
if((EfiSystemTable->RuntimeServices->GetVariable(L"SetupMode", &VarGuid,
NULL, &Size, &VarValue) == STATUS_EFI_SUCCESS) && VarValue != 0)
{
SecureBootStatus = -1;
}
}
/* Return SecureBoot status */
return SecureBootStatus;
}
/**
* This routine allocates a pool memory.
*

6
xtldr/includes/xtbl.h
View File

@ -19,6 +19,9 @@ EXTERN EFI_HANDLE EfiImageHandle;
/* EFI System Table */
EXTERN PEFI_SYSTEM_TABLE EfiSystemTable;
/* EFI Secure Boot status */
EXTERN INT_PTR EfiSecureBoot;
/* Serial port configuration */
EXTERN CPPORT EfiSerialPort;
@ -44,6 +47,9 @@ VOID
BlDbgPrint(IN PUINT16 Format,
IN ...);
INT_PTR
BlEfiGetSecureBootStatus();
EFI_STATUS
BlEfiMemoryAllocatePool(IN UINT_PTR Size,
OUT PVOID *Memory);

4
xtldr/xtldr.c
View File

@ -308,6 +308,10 @@ BlStartXtLoader(IN EFI_HANDLE ImageHandle,
BlDbgPrint(L"WARNING: Failed to disable watchdog timer\n");
}
/* Check SecureBoot status */
EfiSecureBoot = BlEfiGetSecureBootStatus();
BlDbgPrint(L"SecureBoot status: %S\n", EfiSecureBoot == 0 ? L"DISABLED" : EfiSecureBoot > 0 ? L"ENABLED" : L"SETUP");
/* Register loader protocol */
Status = BlRegisterXtLoaderProtocol();
if(Status != STATUS_EFI_SUCCESS)