summaryrefslogtreecommitdiff
path: root/OvmfPkg/OvmfPkg.dec
diff options
context:
space:
mode:
authorGerd Hoffmann <kraxel@redhat.com>2023-05-05 07:17:24 +0200
committermergify[bot] <37929162+mergify[bot]@users.noreply.github.com>2023-05-10 13:39:41 +0000
commit41d7832db02d082405ccc1edf38208b7a5cb8d87 (patch)
tree892ae2ff7cc89b0007239137265acd297a42786e /OvmfPkg/OvmfPkg.dec
parente6447d2a08f5ca585816d093e79a01dad3781f98 (diff)
downloadedk2-41d7832db02d082405ccc1edf38208b7a5cb8d87.zip
edk2-41d7832db02d082405ccc1edf38208b7a5cb8d87.tar.gz
edk2-41d7832db02d082405ccc1edf38208b7a5cb8d87.tar.bz2
OvmfPkg/PlatformBootManagerLib: add PcdBootRestrictToFirmware
Add new PCD PcdBootRestrictToFirmware. When set to TRUE restrict boot options to EFI applications embedded into the firmware image. Behavior should be identical to the PlatformBootManagerLibGrub library variant. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com> Acked-by: Jiewen Yao <Jiewen.yao@intel.com> Acked-by: Ard Biesheuvel <ardb@kernel.org>
Diffstat (limited to 'OvmfPkg/OvmfPkg.dec')
-rw-r--r--OvmfPkg/OvmfPkg.dec3
1 files changed, 3 insertions, 0 deletions
diff --git a/OvmfPkg/OvmfPkg.dec b/OvmfPkg/OvmfPkg.dec
index 03ae29e..cc5a4ce 100644
--- a/OvmfPkg/OvmfPkg.dec
+++ b/OvmfPkg/OvmfPkg.dec
@@ -422,6 +422,9 @@
# check to decide whether to abort dispatch of the driver it is linked into.
gUefiOvmfPkgTokenSpaceGuid.PcdEntryPointOverrideFwCfgVarName|""|VOID*|0x68
+ ## Restrict boot to EFI applications in firmware volumes.
+ gUefiOvmfPkgTokenSpaceGuid.PcdBootRestrictToFirmware|FALSE|BOOLEAN|0x6c
+
[PcdsDynamic, PcdsDynamicEx]
gUefiOvmfPkgTokenSpaceGuid.PcdEmuVariableEvent|0|UINT64|2
gUefiOvmfPkgTokenSpaceGuid.PcdOvmfFlashVariablesEnable|FALSE|BOOLEAN|0x10