• Ard Biesheuvel's avatar
    x86/ima: use correct identifier for SetupMode variable · ff5ac61e
    Ard Biesheuvel authored
    The IMA arch code attempts to inspect the "SetupMode" EFI variable
    by populating a variable called efi_SetupMode_name with the string
    "SecureBoot" and passing that to the EFI GetVariable service, which
    obviously does not yield the expected result.
    
    Given that the string is only referenced a single time, let's get
    rid of the intermediate variable, and pass the correct string as
    an immediate argument. While at it, do the same for "SecureBoot".
    
    Fixes: 399574c6 ("x86/ima: retry detecting secure boot mode")
    Fixes: 980ef4d2 ("x86/ima: check EFI SetupMode too")
    Cc: Matthew Garrett <mjg59@google.com>
    Signed-off-by: default avatarArd Biesheuvel <ardb@kernel.org>
    Cc: stable@vger.kernel.org # v5.3
    Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
    ff5ac61e
ima_arch.c 2.24 KB