vbatts/grub
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add verity hash passthrough

Browse source 
Read the verity hash from the kernel binary and pass it to the running
system via the kernel command line
This commit is contained in:
Matthew Garrett 2015-05-28 11:15:30 -07:00
parent 2755ecd157
commit e5ee3e8fa5
3 changed files with 30 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
grub-core/loader/i386/linux.c
View file

@ -36,6 +36,7 @@
#include <grub/lib/cmdline.h>
#include <grub/linux.h>
#include "verity-hash.h"
GRUB_MOD_LICENSE ("GPLv3+");
#ifdef GRUB_MACHINE_PCBIOS
@ -1016,6 +1017,7 @@ grub_cmd_linux (grub_command_t cmd __attribute__ ((unused)),
maximal_cmdline_size
- (sizeof (LINUX_IMAGE) - 1));
grub_pass_verity_hash(&lh, linux_cmdline);
len = prot_file_size;
if (grub_file_read (file, prot_mode_mem, len) != len && !grub_errno)
grub_error (GRUB_ERR_BAD_OS, N_("premature end of file %s"),