OvmfPkg: Add PlatformSecureLib instance
Signed-off-by: lgrosenb Reviewed-by: jljusten Reviewed-by: mdkinney git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@13090 6f19259b-4bc3-4df7-8a09-765794883524
This commit is contained in:
57
OvmfPkg/Library/PlatformSecureLib/PlatformSecureLib.c
Normal file
57
OvmfPkg/Library/PlatformSecureLib/PlatformSecureLib.c
Normal file
@@ -0,0 +1,57 @@
|
||||
/** @file
|
||||
Provides a platform-specific method to enable Secure Boot Custom Mode setup.
|
||||
|
||||
Copyright (c) 2006 - 2012, Intel Corporation. All rights reserved.<BR>
|
||||
This program and the accompanying materials
|
||||
are licensed and made available under the terms and conditions of the BSD License
|
||||
which accompanies this distribution. The full text of the license may be found at
|
||||
http://opensource.org/licenses/bsd-license.php
|
||||
|
||||
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||
|
||||
**/
|
||||
#include <Library/PcdLib.h>
|
||||
|
||||
/**
|
||||
|
||||
This function detects whether a secure platform-specific method to clear PK(Platform Key)
|
||||
is configured by platform owner. This method is provided for users force to clear PK
|
||||
in case incorrect enrollment mis-haps.
|
||||
|
||||
UEFI231 spec chapter 27.5.2 stipulates: The platform key may also be cleared using
|
||||
a secure platform-specific method. In this case, the global variable SetupMode
|
||||
must also be updated to 1.
|
||||
|
||||
NOTE THAT: This function cannot depend on any EFI Variable Service since they are
|
||||
not available when this function is called in AuthenticateVariable driver.
|
||||
|
||||
@retval TRUE The Platform owner wants to force clear PK.
|
||||
@retval FALSE The Platform owner doesn't want to force clear PK.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
ForceClearPK (
|
||||
VOID
|
||||
)
|
||||
{
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
This function detects whether current platform is operated by a physical present user.
|
||||
|
||||
@retval TRUE The Platform is operated by a physical present user.
|
||||
@retval FALSE The Platform is NOT operated by a physical persent user.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
UserPhysicalPresent (
|
||||
VOID
|
||||
)
|
||||
{
|
||||
return TRUE;
|
||||
}
|
Reference in New Issue
Block a user