diff options
| author | Masahisa Kojima <masahisa.kojima@linaro.org> | 2022-11-20 09:21:18 +0900 |
|---|---|---|
| committer | Heinrich Schuchardt <heinrich.schuchardt@canonical.com> | 2022-11-22 12:00:45 +0100 |
| commit | c3b5af63d1cb9bf5ebcfe04c1fe9880edb62bcac (patch) | |
| tree | 489cb2bcab10628bdd178e3880133ec87c26763e /cmd/Makefile | |
| parent | 21faf4ef67d29fca2f1ecc64350ba63e45481e37 (diff) | |
| download | u-boot-c3b5af63d1cb9bf5ebcfe04c1fe9880edb62bcac.zip u-boot-c3b5af63d1cb9bf5ebcfe04c1fe9880edb62bcac.tar.gz u-boot-c3b5af63d1cb9bf5ebcfe04c1fe9880edb62bcac.tar.bz2 | |
eficonfig: add UEFI Secure Boot Key enrollment interface
This commit adds the menu-driven UEFI Secure Boot Key
enrollment interface. User can enroll PK, KEK, db
and dbx by selecting file.
Only the signed EFI Signature List(s) with an authenticated
header, typically '.auth' file, is accepted.
To clear the PK, KEK, db and dbx, user needs to enroll the null key
signed by PK or KEK.
Signed-off-by: Masahisa Kojima <masahisa.kojima@linaro.org>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Diffstat (limited to 'cmd/Makefile')
| -rw-r--r-- | cmd/Makefile | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/cmd/Makefile b/cmd/Makefile index 2444d11..0b6a96c 100644 --- a/cmd/Makefile +++ b/cmd/Makefile @@ -66,6 +66,11 @@ obj-$(CONFIG_CMD_EEPROM) += eeprom.o obj-$(CONFIG_EFI) += efi.o obj-$(CONFIG_CMD_EFIDEBUG) += efidebug.o obj-$(CONFIG_CMD_EFICONFIG) += eficonfig.o +ifdef CONFIG_CMD_EFICONFIG +ifdef CONFIG_EFI_MM_COMM_TEE +obj-$(CONFIG_EFI_SECURE_BOOT) += eficonfig_sbkey.o +endif +endif obj-$(CONFIG_CMD_ELF) += elf.o obj-$(CONFIG_CMD_EROFS) += erofs.o obj-$(CONFIG_HUSH_PARSER) += exit.o |