Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP2:Update
mokutil.24584
mokutil-enable-setting-fallback-verbosity-and-n...
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File mokutil-enable-setting-fallback-verbosity-and-norebo.patch of Package mokutil.24584
From 57bc385827e7c0e0c86f30bbfa2d48ca9505537e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Renaud=20M=C3=A9trich?= <rmetrich@redhat.com> Date: Fri, 3 Dec 2021 14:18:31 +0100 Subject: [PATCH] mokutil: enable setting fallback verbosity and noreboot mode MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Having mokutil handle FALLBACK_VERBOSE and FB_NO_REBOOT variables eases fallback debugging. Signed-off-by: Renaud Métrich <rmetrich@redhat.com> Signed-off-by: Lee, Chun-Yi <jlee@suse.com> --- data/mokutil | 8 ++++++ man/mokutil.1 | 10 +++++++ src/mokutil.c | 73 ++++++++++++++++++++++++++++++++++++++++++++++++++- 3 files changed, 90 insertions(+), 1 deletion(-) Index: mokutil-0.2.0/man/mokutil.1 =================================================================== --- mokutil-0.2.0.orig/man/mokutil.1 +++ mokutil-0.2.0/man/mokutil.1 @@ -57,6 +57,10 @@ mokutil \- utility to manipulate machine .br \fBmokutil\fR [--set-verbosity (\fItrue\fR | \fIfalse\fR)] .br +\fBmokutil\fR [--set-fallback-verbosity (\fItrue\fR | \fIfalse\fR)] +.br +\fBmokutil\fR [--set-fallback-noreboot (\fItrue\fR | \fIfalse\fR)] +.br \fBmokutil\fR [--pk] .br \fBmokutil\fR [--kek] @@ -147,6 +151,12 @@ Manipulate the MOK blacklist (MOKX) inst \fB--set-verbosity\fR Set the SHIM_VERBOSE to make shim more or less verbose .TP +\fB--set-fallback-verbosity\fR +Set the FALLBACK_VERBOSE to make fallback more or less verbose +.TP +\fB--set-fallback-noreboot\fR +Set the FB_NO_REBOOT to prevent fallback from automatically rebooting the system +.TP \fB--pk\fR List the keys in the public Platform Key (PK) .TP Index: mokutil-0.2.0/src/mokutil.c =================================================================== --- mokutil-0.2.0.orig/src/mokutil.c +++ mokutil-0.2.0/src/mokutil.c @@ -84,6 +84,8 @@ EFI_GUID (0x605dab50, 0xe046, 0x4300, 0x #define DELETE_HASH (1 << 22) #define VERBOSITY (1 << 23) #define LIST_SBAT (1 << 24) +#define FB_VERBOSITY (1 << 25) +#define FB_NOREBOOT (1 << 26) #define DEFAULT_CRYPT_METHOD SHA512_BASED #define DEFAULT_SALT_SIZE SHA512_SALT_MAX @@ -149,6 +151,8 @@ print_help () printf (" --import-hash <hash>\t\t\tImport a hash into MOK or MOKX\n"); printf (" --delete-hash <hash>\t\t\tDelete a hash in MOK or MOKX\n"); printf (" --set-verbosity <true/false>\t\tSet the verbosity bit for shim\n"); + printf (" --set-fallback-verbosity <true/false>\t\tSet the verbosity bit for fallback\n"); + printf (" --set-fallback-noreboot <true/false>\t\tPrevent fallback from automatically rebooting\n"); printf (" --pk\t\t\t\t\tList the keys in PK\n"); printf (" --kek\t\t\t\t\tList the keys in KEK\n"); printf (" --db\t\t\t\t\tList the keys in db\n"); @@ -1959,6 +1963,58 @@ set_verbosity (uint8_t verbosity) } static int +set_fallback_verbosity (const uint8_t verbosity) +{ + efi_variable_t var; + + if (verbosity) { + var.Data = (uint8_t *)&verbosity; + var.DataSize = sizeof (verbosity); + var.VariableName = "FALLBACK_VERBOSE"; + + var.VendorGuid = SHIM_LOCK_GUID; + var.Attributes = EFI_VARIABLE_NON_VOLATILE + | EFI_VARIABLE_BOOTSERVICE_ACCESS + | EFI_VARIABLE_RUNTIME_ACCESS; + + if (edit_variable (&var) != EFI_SUCCESS) { + fprintf (stderr, "Failed to set FALLBACK_VERBOSE\n"); + return -1; + } + } else { + return test_and_delete_var ("FALLBACK_VERBOSE"); + } + + return 0; +} + +static int +set_fallback_noreboot (const uint8_t noreboot) +{ + efi_variable_t var; + + if (noreboot) { + var.Data = (uint8_t *)&noreboot; + var.DataSize = sizeof (noreboot); + var.VariableName = "FB_NO_REBOOT"; + + var.VendorGuid = SHIM_LOCK_GUID; + var.Attributes = EFI_VARIABLE_NON_VOLATILE + | EFI_VARIABLE_BOOTSERVICE_ACCESS + | EFI_VARIABLE_RUNTIME_ACCESS; + + if (edit_variable (&var) != EFI_SUCCESS) { + fprintf (stderr, "Failed to set FB_NO_REBOOT\n"); + return -1; + } + } else { + return test_and_delete_var ("FB_NO_REBOOT"); + } + + return 0; +} + +static int print_var_content (const char *var_name, const efi_guid_t guid) { efi_variable_t var; @@ -2019,6 +2075,8 @@ main (int argc, char *argv[]) unsigned int command = 0; int use_root_pw = 0; uint8_t verbosity = 0; + uint8_t fb_verbosity = 0; + uint8_t fb_noreboot = 0; DBName db_name = MOK_LIST_RT; int ret = -1; @@ -2052,6 +2110,8 @@ main (int argc, char *argv[]) {"import-hash", required_argument, 0, 0 }, {"delete-hash", required_argument, 0, 0 }, {"set-verbosity", required_argument, 0, 0 }, + {"set-fallback-verbosity", required_argument, 0, 0 }, + {"set-fallback-noreboot", required_argument, 0, 0 }, {"pk", no_argument, 0, 0 }, {"kek", no_argument, 0, 0 }, {"db", no_argument, 0, 0 }, @@ -2116,6 +2176,22 @@ main (int argc, char *argv[]) verbosity = 0; else command |= HELP; + } else if (strcmp (option, "set-fallback-verbosity") == 0) { + command |= FB_VERBOSITY; + if (strcmp (optarg, "true") == 0) + fb_verbosity = 1; + else if (strcmp (optarg, "false") == 0) + fb_verbosity = 0; + else + command |= HELP; + } else if (strcmp (option, "set-fallback-noreboot") == 0) { + command |= FB_NOREBOOT; + if (strcmp (optarg, "true") == 0) + fb_noreboot = 1; + else if (strcmp (optarg, "false") == 0) + fb_noreboot = 0; + else + command |= HELP; } else if (strcmp (option, "pk") == 0) { if (db_name != MOK_LIST_RT) { command |= HELP; @@ -2405,6 +2481,12 @@ main (int argc, char *argv[]) case VERBOSITY: ret = set_verbosity (verbosity); break; + case FB_VERBOSITY: + ret = set_fallback_verbosity (fb_verbosity); + break; + case FB_NOREBOOT: + ret = set_fallback_noreboot (fb_noreboot); + break; case LIST_SBAT: ret = print_var_content ("SbatLevelRT", SHIM_LOCK_GUID); break;
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
