MdeModulePkg: Connect VariablePolicy business logic to VariableServices

https://bugzilla.tianocore.org/show_bug.cgi?id=2522

VariablePolicy is an updated interface to
replace VarLock and VarCheckProtocol.

Add connective code to publish the VariablePolicy protocol
and wire it to either the SMM communication interface
or directly into the VariablePolicyLib business logic.

Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Hao A Wu <hao.a.wu@intel.com>
Cc: Liming Gao <liming.gao@intel.com>
Cc: Bret Barkelew <brbarkel@microsoft.com>
Signed-off-by: Bret Barkelew <brbarkel@microsoft.com>
Reviewed-by: Dandan Bi <dandan.bi@intel.com>
Acked-by: Jian J Wang <jian.j.wang@intel.com>
Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn>

1 files changed, 11 insertions, 0 deletions

diff --git a/MdeModulePkg/Universal/Variable/RuntimeDxe/VariableSmmRuntimeDxe.inf b/MdeModulePkg/Universal/Variable/RuntimeDxe/VariableSmmRuntimeDxe.inf
index 01564e4c50..b6dbc839e0 100644
--- a/MdeModulePkg/Universal/Variable/RuntimeDxe/VariableSmmRuntimeDxe.inf
+++ b/MdeModulePkg/Universal/Variable/RuntimeDxe/VariableSmmRuntimeDxe.inf
@@ -14,6 +14,7 @@
 #  the authentication service provided in this driver will be broken, and the behavior is undefined.

 #

 # Copyright (c) 2010 - 2019, Intel Corporation. All rights reserved.<BR>

+# Copyright (c) Microsoft Corporation.<BR>

 # SPDX-License-Identifier: BSD-2-Clause-Patent

 #

 ##

@@ -42,6 +43,7 @@
   VariableParsing.c

   VariableParsing.h

   Variable.h

+  VariablePolicySmmDxe.c

 

 [Packages]

   MdePkg/MdePkg.dec

@@ -56,6 +58,8 @@
   DxeServicesTableLib

   UefiDriverEntryPoint

   TpmMeasurementLib

+  SafeIntLib

+  PcdLib

 

 [Protocols]

   gEfiVariableWriteArchProtocolGuid             ## PRODUCES

@@ -67,11 +71,15 @@
   gEfiSmmVariableProtocolGuid

   gEdkiiVariableLockProtocolGuid                ## PRODUCES

   gEdkiiVarCheckProtocolGuid                    ## PRODUCES

+  gEdkiiVariablePolicyProtocolGuid              ## PRODUCES

 

 [FeaturePcd]

   gEfiMdeModulePkgTokenSpaceGuid.PcdEnableVariableRuntimeCache           ## CONSUMES

   gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics            ## CONSUMES

 

+[Pcd]

+  gEfiMdeModulePkgTokenSpaceGuid.PcdAllowVariablePolicyEnforcementDisable     ## CONSUMES

+

 [Guids]

   ## PRODUCES             ## GUID # Signature of Variable store header

   ## CONSUMES             ## GUID # Signature of Variable store header

@@ -99,6 +107,9 @@
   ## SOMETIMES_CONSUMES   ## Variable:L"dbt"

   gEfiImageSecurityDatabaseGuid

 

+  gVarCheckPolicyLibMmiHandlerGuid

+  gEfiEndOfDxeEventGroupGuid

+

 [Depex]

   gEfiMmCommunication2ProtocolGuid