vbatts/grub
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

verifiers: Verify commands executed by grub

Browse source 
Pass all commands executed by GRUB to the verifiers layer. Most verifiers will
ignore this, but some (such as the TPM verifier) want to be able to measure and
log each command executed in order to ensure that the boot state is as expected.

Signed-off-by: Matthew Garrett <mjg59@google.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
This commit is contained in:
Matthew Garrett 2018-11-29 11:28:08 -08:00 • committed by Daniel Kiper
parent d789e70e26
commit d3a5e812c5
2 changed files with 25 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
include/grub/verify.h
View file

@ -34,6 +34,7 @@ enum grub_verify_string_type
{
GRUB_VERIFY_KERNEL_CMDLINE,
GRUB_VERIFY_MODULE_CMDLINE,
GRUB_VERIFY_COMMAND,
};
struct grub_file_verifier