boot/grub2/0035-kern-Add-lockdown-support.patch

49  grub-core/commands/extcmd.c | 23 +++++++++++++
50  grub-core/kern/command.c    | 24 ++++++++++++++
51  grub-core/kern/lockdown.c   | 80 +++++++++++++++++++++++++++++++++++++++++++++
57  create mode 100644 grub-core/kern/lockdown.c
191 …c kern/i386/tsc_pmtimer.c kern/i386/efi/init.c bus/pci.c kern/i386/dl.c kern/i386/tsc.c kern/i386/…
192 …c kern/i386/tsc_pmtimer.c kern/i386/efi/init.c bus/pci.c kern/i386/dl.c kern/i386/tsc.c kern/i386/…
193  nodist_kernel_exec_SOURCES  = symlist.c  ## platform nodist sources
200 …c kern/i386/tsc_pmtimer.c kern/x86_64/efi/callwrap.S kern/i386/efi/init.c bus/pci.c kern/x86_64/dl…
201 …c kern/i386/tsc_pmtimer.c kern/x86_64/efi/callwrap.S kern/i386/efi/init.c bus/pci.c kern/x86_64/dl…
202  nodist_kernel_exec_SOURCES  = symlist.c  ## platform nodist sources
209 …c kern/ia64/dl.c kern/ia64/dl_helper.c kern/ia64/cache.c lib/division.c disk/efi/efidisk.c kern/ef…
210 …c kern/ia64/dl.c kern/ia64/dl_helper.c kern/ia64/cache.c lib/division.c disk/efi/efidisk.c kern/ef…
211  nodist_kernel_exec_SOURCES  = symlist.c  ## platform nodist sources
218 …c kern/efi/fdt.c kern/arm/dl.c kern/arm/dl_helper.c kern/arm/cache_armv6.S kern/arm/cache_armv7.S …
219 …c kern/efi/fdt.c kern/arm/dl.c kern/arm/dl_helper.c kern/arm/cache_armv6.S kern/arm/cache_armv7.S …
220  nodist_kernel_exec_SOURCES  = symlist.c  ## platform nodist sources
227 …c kern/efi/fdt.c kern/arm64/cache.c kern/arm64/cache_flush.S kern/arm64/dl.c kern/arm64/dl_helper.…
228 …c kern/efi/fdt.c kern/arm64/cache.c kern/arm64/cache_flush.S kern/arm64/dl.c kern/arm64/dl_helper.…
229  nodist_kernel_exec_SOURCES  = symlist.c  ## platform nodist sources
236 …c kern/efi/fdt.c kern/riscv/cache.c kern/riscv/cache_flush.S kern/riscv/dl.c lib/division.c disk/e…
237 …c kern/efi/fdt.c kern/riscv/cache.c kern/riscv/cache_flush.S kern/riscv/dl.c lib/division.c disk/e…
238  nodist_kernel_exec_SOURCES  = symlist.c  ## platform nodist sources
245 …c kern/efi/fdt.c kern/riscv/cache.c kern/riscv/cache_flush.S kern/riscv/dl.c disk/efi/efidisk.c ke…
246 …c kern/efi/fdt.c kern/riscv/cache.c kern/riscv/cache_flush.S kern/riscv/dl.c disk/efi/efidisk.c ke…
247  nodist_kernel_exec_SOURCES  = symlist.c  ## platform nodist sources
255    efi = kern/acpi.c;
256    efi = kern/efi/acpi.c;
257    efi = kern/efi/sb.c;
258 +  efi = kern/lockdown.c;
259    i386_coreboot = kern/i386/pc/acpi.c;
260    i386_multiboot = kern/i386/pc/acpi.c;
261    i386_coreboot = kern/acpi.c;
267  	kern/arm64/cache_flush.S kern/arm64/dl.c \
268  	kern/arm64/dl_helper.c disk/efi/efidisk.c kern/efi/efi.c \
269  	kern/efi/init.c kern/efi/mm.c term/efi/console.c kern/acpi.c \
270 -	kern/efi/acpi.c kern/efi/sb.c kern/compiler-rt.c kern/mm.c \
271 -	kern/time.c kern/generic/millisleep.c kern/command.c \
272 -	kern/corecmd.c kern/device.c kern/disk.c kern/dl.c kern/env.c \
273 -	kern/err.c kern/file.c kern/fs.c kern/list.c kern/main.c \
274 -	kern/misc.c kern/parser.c kern/partition.c \
275 -	kern/rescue_parser.c kern/rescue_reader.c kern/term.c \
276 -	kern/verifiers.c kern/arm/startup.S kern/arm/coreboot/init.c \
277 +	kern/efi/acpi.c kern/efi/sb.c kern/lockdown.c \
278 +	kern/compiler-rt.c kern/mm.c kern/time.c \
279 +	kern/generic/millisleep.c kern/command.c kern/corecmd.c \
280 +	kern/device.c kern/disk.c kern/dl.c kern/env.c kern/err.c \
281 +	kern/file.c kern/fs.c kern/list.c kern/main.c kern/misc.c \
282 +	kern/parser.c kern/partition.c kern/rescue_parser.c \
283 +	kern/rescue_reader.c kern/term.c kern/verifiers.c \
284 +	kern/arm/startup.S kern/arm/coreboot/init.c \
285  	kern/arm/coreboot/timer.c kern/arm/coreboot/coreboot.S \
286  	lib/fdt.c bus/fdt.c term/ps2.c term/arm/pl050.c \
287  	term/arm/cros.c term/arm/cros_ec.c bus/spi/rk3288_spi.c \
363  @COND_arm64_efi_TRUE@	kern/efi/efi.c kern/efi/init.c \
364  @COND_arm64_efi_TRUE@	kern/efi/mm.c term/efi/console.c \
365  @COND_arm64_efi_TRUE@	kern/acpi.c kern/efi/acpi.c kern/efi/sb.c \
366 -@COND_arm64_efi_TRUE@	kern/compiler-rt.c kern/mm.c kern/time.c \
367 +@COND_arm64_efi_TRUE@	kern/lockdown.c kern/compiler-rt.c \
368 +@COND_arm64_efi_TRUE@	kern/mm.c kern/time.c \
369  @COND_arm64_efi_TRUE@	kern/generic/millisleep.c kern/command.c \
370  @COND_arm64_efi_TRUE@	kern/corecmd.c kern/device.c kern/disk.c \
371  @COND_arm64_efi_TRUE@	kern/dl.c kern/env.c kern/err.c \
373  @COND_arm_efi_TRUE@	kern/efi/init.c kern/efi/mm.c \
374  @COND_arm_efi_TRUE@	term/efi/console.c kern/acpi.c \
375  @COND_arm_efi_TRUE@	kern/efi/acpi.c kern/efi/sb.c \
376 -@COND_arm_efi_TRUE@	kern/compiler-rt.c kern/mm.c kern/time.c \
377 +@COND_arm_efi_TRUE@	kern/lockdown.c kern/compiler-rt.c \
378 +@COND_arm_efi_TRUE@	kern/mm.c kern/time.c \
379  @COND_arm_efi_TRUE@	kern/generic/millisleep.c kern/command.c \
380  @COND_arm_efi_TRUE@	kern/corecmd.c kern/device.c kern/disk.c \
381  @COND_arm_efi_TRUE@	kern/dl.c kern/env.c kern/err.c kern/file.c \
383  @COND_i386_efi_TRUE@	kern/efi/efi.c kern/efi/init.c \
384  @COND_i386_efi_TRUE@	kern/efi/mm.c term/efi/console.c \
385  @COND_i386_efi_TRUE@	kern/acpi.c kern/efi/acpi.c kern/efi/sb.c \
386 -@COND_i386_efi_TRUE@	kern/compiler-rt.c kern/mm.c kern/time.c \
387 +@COND_i386_efi_TRUE@	kern/lockdown.c kern/compiler-rt.c \
388 +@COND_i386_efi_TRUE@	kern/mm.c kern/time.c \
389  @COND_i386_efi_TRUE@	kern/generic/millisleep.c kern/command.c \
390  @COND_i386_efi_TRUE@	kern/corecmd.c kern/device.c kern/disk.c \
391  @COND_i386_efi_TRUE@	kern/dl.c kern/env.c kern/err.c \
393  @COND_ia64_efi_TRUE@	kern/efi/efi.c kern/efi/init.c \
394  @COND_ia64_efi_TRUE@	kern/efi/mm.c term/efi/console.c \
395  @COND_ia64_efi_TRUE@	kern/acpi.c kern/efi/acpi.c kern/efi/sb.c \
396 -@COND_ia64_efi_TRUE@	kern/compiler-rt.c kern/mm.c kern/time.c \
397 +@COND_ia64_efi_TRUE@	kern/lockdown.c kern/compiler-rt.c \
398 +@COND_ia64_efi_TRUE@	kern/mm.c kern/time.c \
399  @COND_ia64_efi_TRUE@	kern/generic/millisleep.c kern/command.c \
400  @COND_ia64_efi_TRUE@	kern/corecmd.c kern/device.c kern/disk.c \
401  @COND_ia64_efi_TRUE@	kern/dl.c kern/env.c kern/err.c \
403  @COND_riscv32_efi_TRUE@	kern/efi/init.c kern/efi/mm.c \
404  @COND_riscv32_efi_TRUE@	term/efi/console.c kern/acpi.c \
405  @COND_riscv32_efi_TRUE@	kern/efi/acpi.c kern/efi/sb.c \
406 -@COND_riscv32_efi_TRUE@	kern/compiler-rt.c kern/mm.c \
407 -@COND_riscv32_efi_TRUE@	kern/time.c kern/generic/millisleep.c \
408 +@COND_riscv32_efi_TRUE@	kern/lockdown.c kern/compiler-rt.c \
409 +@COND_riscv32_efi_TRUE@	kern/mm.c kern/time.c \
410 +@COND_riscv32_efi_TRUE@	kern/generic/millisleep.c \
411  @COND_riscv32_efi_TRUE@	kern/command.c kern/corecmd.c \
412  @COND_riscv32_efi_TRUE@	kern/device.c kern/disk.c kern/dl.c \
413  @COND_riscv32_efi_TRUE@	kern/env.c kern/err.c kern/file.c \
415  @COND_riscv64_efi_TRUE@	kern/efi/efi.c kern/efi/init.c \
416  @COND_riscv64_efi_TRUE@	kern/efi/mm.c term/efi/console.c \
417  @COND_riscv64_efi_TRUE@	kern/acpi.c kern/efi/acpi.c \
418 -@COND_riscv64_efi_TRUE@	kern/efi/sb.c kern/compiler-rt.c \
419 -@COND_riscv64_efi_TRUE@	kern/mm.c kern/time.c \
420 -@COND_riscv64_efi_TRUE@	kern/generic/millisleep.c \
421 +@COND_riscv64_efi_TRUE@	kern/efi/sb.c kern/lockdown.c \
422 +@COND_riscv64_efi_TRUE@	kern/compiler-rt.c kern/mm.c \
423 +@COND_riscv64_efi_TRUE@	kern/time.c kern/generic/millisleep.c \
424  @COND_riscv64_efi_TRUE@	kern/command.c kern/corecmd.c \
425  @COND_riscv64_efi_TRUE@	kern/device.c kern/disk.c kern/dl.c \
426  @COND_riscv64_efi_TRUE@	kern/env.c kern/err.c kern/file.c \
428  @COND_x86_64_efi_TRUE@	kern/efi/efi.c kern/efi/init.c \
429  @COND_x86_64_efi_TRUE@	kern/efi/mm.c term/efi/console.c \
430  @COND_x86_64_efi_TRUE@	kern/acpi.c kern/efi/acpi.c \
431 -@COND_x86_64_efi_TRUE@	kern/efi/sb.c kern/compiler-rt.c \
432 -@COND_x86_64_efi_TRUE@	kern/mm.c kern/time.c \
433 +@COND_x86_64_efi_TRUE@	kern/efi/sb.c kern/lockdown.c \
434 +@COND_x86_64_efi_TRUE@	kern/compiler-rt.c kern/mm.c kern/time.c \
435  @COND_x86_64_efi_TRUE@	kern/generic/millisleep.c kern/command.c \
436  @COND_x86_64_efi_TRUE@	kern/corecmd.c kern/device.c kern/disk.c \
437  @COND_x86_64_efi_TRUE@	kern/dl.c kern/env.c kern/err.c \
455 @@ -35293,6 +35312,20 @@ kern/efi/kernel_exec-sb.obj: kern/efi/sb.c
457 …LAGS) -c -o kern/efi/kernel_exec-sb.obj `if test -f 'kern/efi/sb.c'; then $(CYGPATH_W) 'kern/efi/s…
459 +kern/kernel_exec-lockdown.o: kern/lockdown.c
460 …)/kernel_exec-lockdown.Tpo -c -o kern/kernel_exec-lockdown.o `test -f 'kern/lockdown.c' || echo '$…
462 +@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='kern/lockdown.c' object='kern/kernel_exec-lock…
464 …nel_exec_CFLAGS) $(CFLAGS) -c -o kern/kernel_exec-lockdown.o `test -f 'kern/lockdown.c' || echo '$…
466 +kern/kernel_exec-lockdown.obj: kern/lockdown.c
467 …o -c -o kern/kernel_exec-lockdown.obj `if test -f 'kern/lockdown.c'; then $(CYGPATH_W) 'kern/lockd…
469 +@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='kern/lockdown.c' object='kern/kernel_exec-lock…
471 …) -c -o kern/kernel_exec-lockdown.obj `if test -f 'kern/lockdown.c'; then $(CYGPATH_W) 'kern/lockd…
473  kern/kernel_exec-compiler-rt.o: kern/compiler-rt.c
474 …l_exec-compiler-rt.Tpo -c -o kern/kernel_exec-compiler-rt.o `test -f 'kern/compiler-rt.c' || echo …
488 diff --git a/grub-core/commands/extcmd.c b/grub-core/commands/extcmd.c
490 --- a/grub-core/commands/extcmd.c
491 +++ b/grub-core/commands/extcmd.c
529 diff --git a/grub-core/kern/command.c b/grub-core/kern/command.c
531 --- a/grub-core/kern/command.c
532 +++ b/grub-core/kern/command.c
571 diff --git a/grub-core/kern/lockdown.c b/grub-core/kern/lockdown.c
575 +++ b/grub-core/kern/lockdown.c
579 + *  Copyright (C) 2020  Free Software Foundation, Inc.
699 + *  Copyright (C) 2020  Free Software Foundation, Inc.
746  ./grub-core/kern/ieee1275/mmap.c
747  ./grub-core/kern/ieee1275/openfw.c
748  ./grub-core/kern/list.c
749 +./grub-core/kern/lockdown.c
750  ./grub-core/kern/main.c
751  ./grub-core/kern/mips/arc/init.c
752  ./grub-core/kern/mips/dl.c