Add Secure MOR implementation.
Add a new module MemoryOverwriteRequestControlLock to register VarCheck handler to enforce MorLock Policy. Only SMM version is added because MOR is only supported in SMM variable case. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: "Yao, Jiewen" <Jiewen.Yao@intel.com> Reviewed-by: "Chao Zhang" <chao.b.zhang@intel.com> git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@18092 6f19259b-4bc3-4df7-8a09-765794883524
This commit is contained in:
@@ -0,0 +1,66 @@
|
||||
## @file
|
||||
# Initilizes MemoryOverwriteRequestControlLock variable
|
||||
#
|
||||
# This module will add Variable Hook and allow MemoryOverwriteRequestControlLock variable set only once.
|
||||
#
|
||||
# Copyright (c) 2015, Intel Corporation. All rights reserved.<BR>
|
||||
# This program and the accompanying materials
|
||||
# are licensed and made available under the terms and conditions of the BSD License
|
||||
# which accompanies this distribution. The full text of the license may be found at
|
||||
# http://opensource.org/licenses/bsd-license.php
|
||||
# THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||
#
|
||||
##
|
||||
|
||||
[Defines]
|
||||
INF_VERSION = 0x00010005
|
||||
BASE_NAME = TcgMorLockSmm
|
||||
MODULE_UNI_FILE = TcgMorLock.uni
|
||||
FILE_GUID = E2EA6F47-E678-47FA-8C1B-02A03E825C6E
|
||||
MODULE_TYPE = DXE_SMM_DRIVER
|
||||
VERSION_STRING = 1.0
|
||||
PI_SPECIFICATION_VERSION = 0x0001000A
|
||||
ENTRY_POINT = MorLockDriverEntryPointSmm
|
||||
|
||||
#
|
||||
# The following information is for reference only and not required by the build tools.
|
||||
#
|
||||
# VALID_ARCHITECTURES = IA32 X64 IPF EBC
|
||||
#
|
||||
|
||||
[Sources]
|
||||
TcgMorLock.c
|
||||
TcgMorLockSmm.c
|
||||
|
||||
[Packages]
|
||||
MdePkg/MdePkg.dec
|
||||
MdeModulePkg/MdeModulePkg.dec
|
||||
SecurityPkg/SecurityPkg.dec
|
||||
|
||||
[LibraryClasses]
|
||||
UefiDriverEntryPoint
|
||||
SmmServicesTableLib
|
||||
DebugLib
|
||||
BaseLib
|
||||
BaseMemoryLib
|
||||
|
||||
[Guids]
|
||||
## SOMETIMES_CONSUMES ## Variable:L"MemoryOverwriteRequestControl"
|
||||
gEfiMemoryOverwriteControlDataGuid
|
||||
|
||||
## SOMETIMES_CONSUMES ## Variable:L"MemoryOverwriteRequestControlLock"
|
||||
## PRODUCES ## Variable:L"MemoryOverwriteRequestControlLock"
|
||||
gEfiMemoryOverwriteRequestControlLockGuid
|
||||
|
||||
[Protocols]
|
||||
gEdkiiSmmVarCheckProtocolGuid ## CONSUMES
|
||||
gEfiSmmVariableProtocolGuid ## CONSUMES
|
||||
|
||||
[Depex]
|
||||
gEfiSmmVariableProtocolGuid AND
|
||||
gSmmVariableWriteGuid AND
|
||||
( gEfiTcgProtocolGuid OR gEfiTrEEProtocolGuid )
|
||||
|
||||
[UserExtensions.TianoCore."ExtraFiles"]
|
||||
TcgMorLockExtra.uni
|
Reference in New Issue
Block a user