Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | scripts: ipe: polgen: remove redundant close and error exit path | Colin Ian King | 2024-11-19 | 1 | -10/+2 |
| | | | | | | | | | | | | Currently if an fopen fails the error exit path is via code that checks if fp is not null and closes the file, however, fp is null so this check and close is redundant. Since the only use of the err exit label is on the fopen check, remove it and replace the code with a simple return of errno. Also remove variable rc since it's no longer required. Signed-off-by: Colin Ian King <colin.i.king@gmail.com> Signed-off-by: Fan Wu <wufan@kernel.org> | ||||
* | scripts: add boot policy generation program | Deven Bowers | 2024-08-20 | 4 | -0/+154 |
Enables an IPE policy to be enforced from kernel start, enabling access control based on trust from kernel startup. This is accomplished by transforming an IPE policy indicated by CONFIG_IPE_BOOT_POLICY into a c-string literal that is parsed at kernel startup as an unsigned policy. Signed-off-by: Deven Bowers <deven.desai@linux.microsoft.com> Signed-off-by: Fan Wu <wufan@linux.microsoft.com> Signed-off-by: Paul Moore <paul@paul-moore.com> |