diff options
| author | Chester Lin <clin@suse.com> | 2020-10-30 14:08:38 +0800 |
|---|---|---|
| committer | Ard Biesheuvel <ardb@kernel.org> | 2020-11-04 23:05:40 +0100 |
| commit | e1ac4b2406d94eddce8ac2c5ab4235f6075a9602 (patch) | |
| tree | 668816181cf8a034e3af08297f94a0e1e33c1350 /arch | |
| parent | 6edcf9dc2e1aff3aa1f5a69ee420fb30dd0e968a (diff) | |
| download | linux-stable-e1ac4b2406d94eddce8ac2c5ab4235f6075a9602.tar.gz linux-stable-e1ac4b2406d94eddce8ac2c5ab4235f6075a9602.tar.bz2 linux-stable-e1ac4b2406d94eddce8ac2c5ab4235f6075a9602.zip | |
efi: generalize efi_get_secureboot
Generalize the efi_get_secureboot() function so not only efistub but also
other subsystems can use it.
Note that the MokSbState handling is not factored out: the variable is
boot time only, and so it cannot be parameterized as easily. Also, the
IMA code will switch to this version in a future patch, and it does not
incorporate the MokSbState exception in the first place.
Note that the new efi_get_secureboot_mode() helper treats any failures
to read SetupMode as setup mode being disabled.
Co-developed-by: Chester Lin <clin@suse.com>
Signed-off-by: Chester Lin <clin@suse.com>
Acked-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Diffstat (limited to 'arch')
| -rw-r--r-- | arch/x86/boot/compressed/Makefile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/arch/x86/boot/compressed/Makefile b/arch/x86/boot/compressed/Makefile index ee249088cbfe..8d358a6fe6ec 100644 --- a/arch/x86/boot/compressed/Makefile +++ b/arch/x86/boot/compressed/Makefile @@ -35,7 +35,7 @@ cflags-$(CONFIG_X86_32) := -march=i386 cflags-$(CONFIG_X86_64) := -mcmodel=small -mno-red-zone KBUILD_CFLAGS += $(cflags-y) KBUILD_CFLAGS += -mno-mmx -mno-sse -KBUILD_CFLAGS += -ffreestanding +KBUILD_CFLAGS += -ffreestanding -fshort-wchar KBUILD_CFLAGS += -fno-stack-protector KBUILD_CFLAGS += $(call cc-disable-warning, address-of-packed-member) KBUILD_CFLAGS += $(call cc-disable-warning, gnu) |