[PATCH v7 2/5] efi/libstub: Reserve confidential computing secret area

Gerd Hoffmann kraxel at redhat.com
Wed Feb 2 08:41:04 UTC 2022


On Tue, Feb 01, 2022 at 12:44:10PM +0000, Dov Murik wrote:
> Some older firmware declare the confidential computing secret area as
> EFI_BOOT_SERVICES_DATA region.  Fix this up by treating this memory
> region as EFI_RESERVED_TYPE, as it should be.
> 
> If that memory region is already EFI_RESERVED_TYPE then this has no
> effect on the E820 map.

Hmm, sure we actually want merge this?  I suspect by the time this
landed in an upstream kernel "older firmware" isn't much of a problem
any more.

take care,
  Gerd



More information about the Linux-security-module-archive mailing list