From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752102AbdBAPAZ (ORCPT ); Wed, 1 Feb 2017 10:00:25 -0500 Received: from mx1.redhat.com ([209.132.183.28]:48980 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750926AbdBAPAX (ORCPT ); Wed, 1 Feb 2017 10:00:23 -0500 Organization: Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903 From: David Howells In-Reply-To: References: <148587558696.4026.16034622623568539004.stgit@warthog.procyon.org.uk> <148587564847.4026.5759345672956585977.stgit@warthog.procyon.org.uk> <10454.1485889162@warthog.procyon.org.uk> <20578.1485952425@warthog.procyon.org.uk> To: Ard Biesheuvel Cc: dhowells@redhat.com, James Bottomley , Matt Fleming , "linux-efi@vger.kernel.org" , "linux-kernel@vger.kernel.org" , linux-security-module , keyrings@vger.kernel.org, "linux-arm-kernel@lists.infradead.org" Subject: Re: [PATCH 6/7] efi: Handle secure boot from UEFI-2.6 [ver #7] MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <23749.1485961217.1@warthog.procyon.org.uk> Date: Wed, 01 Feb 2017 15:00:17 +0000 Message-ID: <23750.1485961217@warthog.procyon.org.uk> X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.25]); Wed, 01 Feb 2017 15:00:24 +0000 (UTC) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Ard Biesheuvel wrote: > From the OS pov, UserMode and DeployedMode are the same, the only > difference being that AuditMode may be entered from UserMode simply by > setting the variable to 0x1 (which can only be done before > ExitBootServices()). And since AuditMode implies SetupMode (according > to the diagram), you are right that we don't need to care about > AuditMode either. AFAICT, that makes the entire patch unnecessary, so > let's drop it for now. Okay, in that case, do you want me to reissue and place a signed tag on my patchset without that patch, or can you pull the other patches individually? David