cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

keyring_handler.h (1150B)

      1/* SPDX-License-Identifier: GPL-2.0 */
      2
      3#ifndef PLATFORM_CERTS_INTERNAL_H
      4#define PLATFORM_CERTS_INTERNAL_H
      5
      6#include <linux/efi.h>
      7
      8void blacklist_hash(const char *source, const void *data,
      9		    size_t len, const char *type,
     10		    size_t type_len);
     11
     12/*
     13 * Blacklist an X509 TBS hash.
     14 */
     15void blacklist_x509_tbs(const char *source, const void *data, size_t len);
     16
     17/*
     18 * Blacklist the hash of an executable.
     19 */
     20void blacklist_binary(const char *source, const void *data, size_t len);
     21
     22/*
     23 * Return the handler for particular signature list types found in the db.
     24 */
     25efi_element_handler_t get_handler_for_db(const efi_guid_t *sig_type);
     26
     27/*
     28 * Return the handler for particular signature list types found in the mok.
     29 */
     30efi_element_handler_t get_handler_for_mok(const efi_guid_t *sig_type);
     31
     32/*
     33 * Return the handler for particular signature list types found in the dbx.
     34 */
     35efi_element_handler_t get_handler_for_dbx(const efi_guid_t *sig_type);
     36
     37#endif
     38
     39#ifndef UEFI_QUIRK_SKIP_CERT
     40#define UEFI_QUIRK_SKIP_CERT(vendor, product) \
     41		 .matches = { \
     42			DMI_MATCH(DMI_BOARD_VENDOR, vendor), \
     43			DMI_MATCH(DMI_PRODUCT_NAME, product), \
     44		},
     45#endif