aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStewart Smith <stewart@linux.vnet.ibm.com>2018-02-07 21:28:17 -0600
committerStewart Smith <stewart@linux.vnet.ibm.com>2018-02-08 18:21:42 -0600
commitfd5d3fea1e540e9275207d2a9d3bb20181ca904f (patch)
tree73844a53bed2bea9e884e521840af35519d9a3b5
parent5cb93cd26e195479695be1aadf4baff9611fd243 (diff)
downloadskiboot-fd5d3fea1e540e9275207d2a9d3bb20181ca904f.zip
skiboot-fd5d3fea1e540e9275207d2a9d3bb20181ca904f.tar.gz
skiboot-fd5d3fea1e540e9275207d2a9d3bb20181ca904f.tar.bz2
stb: Enforce secure boot if called before libstb initialized
Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>
-rw-r--r--libstb/secureboot.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/libstb/secureboot.c b/libstb/secureboot.c
index 94be24b..921aba7 100644
--- a/libstb/secureboot.c
+++ b/libstb/secureboot.c
@@ -183,6 +183,7 @@ int secureboot_verify(enum resource_id id, void *buf, size_t len)
if (!secure_init) {
prlog(PR_WARNING, "container NOT VERIFIED, resource_id=%d "
"secureboot not yet initialized\n", id);
+ secureboot_enforce();
return -1;
}