MdeModulePkg/VariablePolicy: Add more granular variable policy querying
Introduces two new APIs to EDKII_VARIABLE_POLICY_PROTOCOL: 1. GetVariablePolicyInfo() 2. GetLockOnVariableStateVariablePolicyInfo() These allow a caller to retrieve policy information associated with a UEFI variable given the variable name and vendor GUID. GetVariablePolicyInfo() - Returns the variable policy applied to the UEFI variable. If the variable policy is applied toward an individual UEFI variable, that name can optionally be returned. GetLockOnVariableStateVariablePolicyInfo() - Returns the Lock on Variable State policy applied to the UEFI variable. If the Lock on Variable State policy is applied to a specific variable name, that name can optionally be returned. These functions can be useful for a variety of purposes such as auditing, testing, and functional flows. Also fixed some variable name typos in code touched by the changes. Cc: Dandan Bi <dandan.bi@intel.com> Cc: Hao A Wu <hao.a.wu@intel.com> Cc: Jian J Wang <jian.j.wang@intel.com> Cc: Liming Gao <gaoliming@byosoft.com.cn> Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn> Message-Id: <20231030203112.736-2-mikuback@linux.microsoft.com>
This commit is contained in:
committed by
mergify[bot]
parent
8e74629070
commit
f3b2187d55
@@ -33,7 +33,9 @@ EDKII_VARIABLE_POLICY_PROTOCOL mVariablePolicyProtocol = {
|
||||
ProtocolIsVariablePolicyEnabled,
|
||||
RegisterVariablePolicy,
|
||||
DumpVariablePolicy,
|
||||
LockVariablePolicy
|
||||
LockVariablePolicy,
|
||||
GetVariablePolicyInfo,
|
||||
GetLockOnVariableStateVariablePolicyInfo
|
||||
};
|
||||
EDKII_VAR_CHECK_PROTOCOL mVarCheck = {
|
||||
VarCheckRegisterSetVariableCheckHandler,
|
||||
|
Reference in New Issue
Block a user