aboutsummaryrefslogtreecommitdiff
path: root/libstb
diff options
context:
space:
mode:
authorEric Richter <erichte@linux.ibm.com>2020-09-16 11:21:12 -0500
committerOliver O'Halloran <oohall@gmail.com>2020-10-01 13:44:06 +1000
commit9cc5f24b72aba38e4e1bfb93806c4c2743fd9343 (patch)
tree3cf94287a6bc83ab7862363abeabf25657594500 /libstb
parentef70d6488bc7fd5e1c8a36cf182a54479ccb65ab (diff)
downloadskiboot-9cc5f24b72aba38e4e1bfb93806c4c2743fd9343.zip
skiboot-9cc5f24b72aba38e4e1bfb93806c4c2743fd9343.tar.gz
skiboot-9cc5f24b72aba38e4e1bfb93806c4c2743fd9343.tar.bz2
libstb/secureboot: expose secureboot_enforce for later use in secvar
This patch exposes the secureboot_enforce() function to unify any system-halting behavior enacted by either firmware or OS secure boot. Signed-off-by: Eric Richter <erichte@linux.ibm.com> Signed-off-by: Oliver O'Halloran <oohall@gmail.com>
Diffstat (limited to 'libstb')
-rw-r--r--libstb/secureboot.c2
-rw-r--r--libstb/secureboot.h1
2 files changed, 2 insertions, 1 deletions
diff --git a/libstb/secureboot.c b/libstb/secureboot.c
index c869721..6032480 100644
--- a/libstb/secureboot.c
+++ b/libstb/secureboot.c
@@ -27,7 +27,7 @@ static struct {
{ IBM_SECUREBOOT_V2, "ibm,secureboot-v2" },
};
-static void secureboot_enforce(void)
+void secureboot_enforce(void)
{
/* Sanity check */
if (!secure_mode)
diff --git a/libstb/secureboot.h b/libstb/secureboot.h
index 0792dd5..721b28d 100644
--- a/libstb/secureboot.h
+++ b/libstb/secureboot.h
@@ -15,6 +15,7 @@ enum secureboot_version {
IBM_SECUREBOOT_V2,
};
+void secureboot_enforce(void);
bool secureboot_is_compatible(struct dt_node *node, int *version, const char **compat);
void secureboot_init(void);