Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DO NOT MERGE] [PROTOTYPE] Exclude FV EFI Applications #330

Draft
wants to merge 2 commits into
base: release/202405
Choose a base branch
from

Conversation

Flickdm
Copy link
Member

@Flickdm Flickdm commented Sep 5, 2024

Description

This change is a prototype to fix an issue where applications loaded from firmware are being measured into PCR[4]and thus changing the measurment and causing a PCR4 mismatch.

This change

  • Prevents measuring into PCR[4]
  • Logs a signal to PCR[0] as a non measured event

For details on how to complete to complete these options and their meaning refer to CONTRIBUTING.md.

  • Impacts functionality?
  • Impacts security?
  • Alters PCR[4]
  • Breaking change?
  • Includes tests?
  • Includes documentation?

How This Was Tested

Platform
Still under test

Integration Instructions

N/A

This change is to exclude FV EFI applications from PCR4. This is to
prevent the PCR4 value from changing when an EFI application is loaded.
This occurs when the EFI application is loaded from a firmware volume
after a firmware update.
@github-actions github-actions bot added impact:non-functional Does not have a functional impact impact:security Has a security impact labels Sep 5, 2024
@Flickdm Flickdm changed the title [DO NOT MERGE] [PROTOTYPE] Exlude FV EFI Applications [DO NOT MERGE] [PROTOTYPE] Exclude FV EFI Applications Sep 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
impact:non-functional Does not have a functional impact impact:security Has a security impact
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant