integrity: Check properly whether EFI GetVariable() is available
Testing the value of the efi.get_variable function pointer is not the right way to establish whether the platform supports EFI variables at runtime. Instead, use the newly added granular check that can test for the presence of each EFI runtime service individually. Acked-by: Serge Hallyn <serge@hallyn.com> Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
This commit is contained in:
Родитель
9a440391b5
Коммит
6b75d54d52
|
@ -76,7 +76,7 @@ static int __init load_uefi_certs(void)
|
|||
unsigned long dbsize = 0, dbxsize = 0, moksize = 0;
|
||||
int rc = 0;
|
||||
|
||||
if (!efi.get_variable)
|
||||
if (!efi_rt_services_supported(EFI_RT_SUPPORTED_GET_VARIABLE))
|
||||
return false;
|
||||
|
||||
/* Get db, MokListRT, and dbx. They might not exist, so it isn't
|
||||
|
|
Загрузка…
Ссылка в новой задаче