Skip to content
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Commit 04addb9

Browse files
committedJun 9, 2023
SkuSiPolicy payload - at the moment this is only for testing
1 parent e6fe55f commit 04addb9

5 files changed

+21
-5
lines changed
 

‎Makefile

+21-5
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,10 @@ endef
5757
SBATPATH = $(TOPDIR)/data/sbat.csv
5858
SBATLEVELLATESTPATH = $(TOPDIR)/data/sbat_level_latest.csv
5959
SBATLEVELPREVIOUSPATH = $(TOPDIR)/data/sbat_level_previous.csv
60+
SSPVLATESTPATH = $(TOPDIR)/data/SkuSiPolicy_latest.bin
61+
SSPSLATESTPATH = $(TOPDIR)/data/SkuSiPolicy_Version_latest.bin
62+
SSPVPREVIOUSPATH = $(TOPDIR)/data/SkuSiPolicy_previous.bin
63+
SSPSPREVIOUSPATH = $(TOPDIR)/data/SkuSiPolicy_Version_previous.bin
6064
VENDOR_SBATS := $(sort $(foreach x,$(wildcard $(TOPDIR)/data/sbat.*.csv data/sbat.*.csv),$(notdir $(x))))
6165

6266
OBJFLAGS =
@@ -88,19 +92,19 @@ endif
8892

8993
all : certmule.efi revocations.efi
9094

91-
certmule.so : sbat_data.o certmule.o
95+
certmule.so : revocation_data.o certmule.o
9296
certmule.so : SOLIBS=
9397
certmule.so : SOFLAGS=
9498
certmule.so : BUILDFLAGS+=-DVENDOR_DB
9599
certmule.efi : OBJFLAGS = --strip-unneeded $(call VENDOR_DB, $<)
96100
certmule.efi : SECTIONS=.text .reloc .db .sbat
97101
certmule.efi : VENDOR_DB_FILE?=db.esl
98102

99-
revocations.so : sbat_data.o revocations.o
103+
revocations.so : revocation_data.o revocations.o
100104
revocations.so : SOLIBS=
101105
revocations.so : SOFLAGS=
102106
revocations.efi : OBJFLAGS = --strip-unneeded
103-
revocations.efi : SECTIONS=.text .reloc .sbat .sbatl .sbatp
107+
revocations.efi : SECTIONS=.text .reloc .sbat .sbatl .sbatp .sspvp .sspsp .sspvl .sspsl
104108

105109
revocations.o : certmule.o
106110
cp certmule.o revocations.o
@@ -114,8 +118,8 @@ endif
114118
$(OBJFLAGS) \
115119
$(FORMAT) $^ $@
116120

117-
sbat_data.o : | $(SBATPATH) $(VENDOR_SBATS)
118-
sbat_data.o : /dev/null
121+
revocation_data.o : | $(SBATPATH) $(VENDOR_SBATS)
122+
revocation_data.o : /dev/null
119123
$(CC) $(BUILDFLAGS) -x c -c -o $@ $<
120124
$(OBJCOPY) --add-section .sbat=$(SBATPATH) \
121125
--set-section-flags .sbat=contents,alloc,load,readonly,data \
@@ -126,6 +130,18 @@ sbat_data.o : /dev/null
126130
$(OBJCOPY) --add-section .sbatp=$(SBATLEVELPREVIOUSPATH) \
127131
--set-section-flags .sbatp=contents,alloc,load,readonly,data \
128132
$@
133+
$(OBJCOPY) --add-section .sspvl=$(SSPVLATESTPATH) \
134+
--set-section-flags .sspvp=contents,alloc,load,readonly,data \
135+
$@
136+
$(OBJCOPY) --add-section .sspsl=$(SSPSLATESTPATH) \
137+
--set-section-flags .sspsp=contents,alloc,load,readonly,data \
138+
$@
139+
# $(OBJCOPY) --add-section .sspvp=$(SSPVPREVIOUSPATH) \
140+
# --set-section-flags .sspvp=contents,alloc,load,readonly,data \
141+
# $@
142+
# $(OBJCOPY) --add-section .sspsp=$(SSPSPREVIOUSPATH) \
143+
# --set-section-flags .sspsp=contents,alloc,load,readonly,data \
144+
# $@
129145
$(foreach vs,$(VENDOR_SBATS),$(call add-vendor-sbat,$(vs),$@))
130146

131147
%.so : %.o

‎data/SkuSiPolicy_Version_latest.bin

8 Bytes
Binary file not shown.

‎data/SkuSiPolicy_Version_previous.bin

131 Bytes
Binary file not shown.

‎data/SkuSiPolicy_latest.bin

131 Bytes
Binary file not shown.

‎data/SkuSiPolicy_previous.bin

131 Bytes
Binary file not shown.

0 commit comments

Comments
 (0)
Please sign in to comment.