2013-02-08 23:48:51 +08:00
|
|
|
menu "EFI (Extensible Firmware Interface) Support"
|
|
|
|
|
depends on EFI
|
|
|
|
|
|
|
|
|
|
config EFI_VARS
|
|
|
|
|
tristate "EFI Variable Support via sysfs"
|
|
|
|
|
depends on EFI
|
|
|
|
|
default n
|
|
|
|
|
help
|
|
|
|
|
If you say Y here, you are able to get EFI (Extensible Firmware
|
|
|
|
|
Interface) variable information via sysfs. You may read,
|
|
|
|
|
write, create, and destroy EFI variables through this interface.
|
|
|
|
|
|
|
|
|
|
Note that using this driver in concert with efibootmgr requires
|
|
|
|
|
at least test release version 0.5.0-test3 or later, which is
|
2014-12-10 05:14:11 +08:00
|
|
|
available from:
|
2013-02-08 23:48:51 +08:00
|
|
|
<http://linux.dell.com/efibootmgr/testing/efibootmgr-0.5.0-test3.tar.gz>
|
|
|
|
|
|
|
|
|
|
Subsequent efibootmgr releases may be found at:
|
2014-12-10 05:14:11 +08:00
|
|
|
<http://github.com/vathpela/efibootmgr>
|
2013-02-08 23:48:51 +08:00
|
|
|
|
efi: Work around ia64 build problem with ESRT driver
So, I'm told this problem exists in the world:
> Subject: Build error in -next due to 'efi: Add esrt support'
>
> Building ia64:defconfig ... failed
> --------------
> Error log:
>
> drivers/firmware/efi/esrt.c:28:31: fatal error: asm/early_ioremap.h: No such file or directory
>
I'm not really sure how it's okay that we have things in asm-generic on
some platforms but not others - is having it the same everywhere not the
whole point of asm-generic?
That said, ia64 doesn't have early_ioremap.h . So instead, since it's
difficult to imagine new IA64 machines with UEFI 2.5, just don't build
this code there.
To me this looks like a workaround - doing something like:
generic-y += early_ioremap.h
in arch/ia64/include/asm/Kbuild would appear to be more correct, but
ia64 has its own early_memremap() decl in arch/ia64/include/asm/io.h ,
and it's a macro. So adding the above /and/ requiring that asm/io.h be
included /after/ asm/early_ioremap.h in all cases would fix it, but
that's pretty ugly as well. Since I'm not going to spend the rest of my
life rectifying ia64 headers vs "generic" headers that aren't generic,
it's much simpler to just not build there.
Note that I've only actually tried to build this patch on x86_64, but
esrt.o still gets built there, and that would seem to demonstrate that
the conditional building is working correctly at all the places the code
built before. I no longer have any ia64 machines handy to test that the
exclusion actually works there.
Signed-off-by: Peter Jones <pjones@redhat.com>
Acked-by: Tony Luck <tony.luck@intel.com>
Reviewed-by: Guenter Roeck <linux@roeck-us.net>
(Compile-)Tested-by: Guenter Roeck <linux@roeck-us.net>
Signed-off-by: Matt Fleming <matt.fleming@intel.com>
2015-06-06 03:14:54 +08:00
|
|
|
config EFI_ESRT
|
|
|
|
|
bool
|
|
|
|
|
depends on EFI && !IA64
|
|
|
|
|
default y
|
|
|
|
|
|
2013-02-08 23:48:51 +08:00
|
|
|
config EFI_VARS_PSTORE
|
|
|
|
|
tristate "Register efivars backend for pstore"
|
|
|
|
|
depends on EFI_VARS && PSTORE
|
|
|
|
|
default y
|
|
|
|
|
help
|
|
|
|
|
Say Y here to enable use efivars as a backend to pstore. This
|
|
|
|
|
will allow writing console messages, crash dumps, or anything
|
|
|
|
|
else supported by pstore to EFI variables.
|
|
|
|
|
|
|
|
|
|
config EFI_VARS_PSTORE_DEFAULT_DISABLE
|
|
|
|
|
bool "Disable using efivars as a pstore backend by default"
|
|
|
|
|
depends on EFI_VARS_PSTORE
|
|
|
|
|
default n
|
|
|
|
|
help
|
|
|
|
|
Saying Y here will disable the use of efivars as a storage
|
|
|
|
|
backend for pstore by default. This setting can be overridden
|
|
|
|
|
using the efivars module's pstore_disable parameter.
|
|
|
|
|
|
2013-12-20 18:02:18 +08:00
|
|
|
config EFI_RUNTIME_MAP
|
|
|
|
|
bool "Export efi runtime maps to sysfs"
|
2015-09-10 06:38:55 +08:00
|
|
|
depends on X86 && EFI && KEXEC_CORE
|
2013-12-20 18:02:18 +08:00
|
|
|
default y
|
|
|
|
|
help
|
|
|
|
|
Export efi runtime memory maps to /sys/firmware/efi/runtime-map.
|
|
|
|
|
That memory map is used for example by kexec to set up efi virtual
|
|
|
|
|
mapping the 2nd kernel, but can also be used for debugging purposes.
|
|
|
|
|
|
|
|
|
|
See also Documentation/ABI/testing/sysfs-firmware-efi-runtime-map.
|
|
|
|
|
|
2015-09-30 22:01:56 +08:00
|
|
|
config EFI_FAKE_MEMMAP
|
|
|
|
|
bool "Enable EFI fake memory map"
|
|
|
|
|
depends on EFI && X86
|
|
|
|
|
default n
|
|
|
|
|
help
|
|
|
|
|
Saying Y here will enable "efi_fake_mem" boot option.
|
|
|
|
|
By specifying this parameter, you can add arbitrary attribute
|
|
|
|
|
to specific memory range by updating original (firmware provided)
|
|
|
|
|
EFI memmap.
|
|
|
|
|
This is useful for debugging of EFI memmap related feature.
|
|
|
|
|
e.g. Address Range Mirroring feature.
|
|
|
|
|
|
|
|
|
|
config EFI_MAX_FAKE_MEM
|
|
|
|
|
int "maximum allowable number of ranges in efi_fake_mem boot option"
|
|
|
|
|
depends on EFI_FAKE_MEMMAP
|
|
|
|
|
range 1 128
|
|
|
|
|
default 8
|
|
|
|
|
help
|
|
|
|
|
Maximum allowable number of ranges in efi_fake_mem boot option.
|
|
|
|
|
Ranges can be set up to this value using comma-separated list.
|
|
|
|
|
The default value is 8.
|
|
|
|
|
|
2013-12-31 01:12:12 +08:00
|
|
|
config EFI_PARAMS_FROM_FDT
|
|
|
|
|
bool
|
|
|
|
|
help
|
|
|
|
|
Select this config option from the architecture Kconfig if
|
|
|
|
|
the EFI runtime support gets system table address, memory
|
|
|
|
|
map address, and other parameters from the device tree.
|
|
|
|
|
|
2014-06-26 18:09:05 +08:00
|
|
|
config EFI_RUNTIME_WRAPPERS
|
|
|
|
|
bool
|
|
|
|
|
|
2014-07-02 20:54:43 +08:00
|
|
|
config EFI_ARMSTUB
|
|
|
|
|
bool
|
|
|
|
|
|
2016-04-26 04:06:57 +08:00
|
|
|
config EFI_BOOTLOADER_CONTROL
|
|
|
|
|
tristate "EFI Bootloader Control"
|
|
|
|
|
depends on EFI_VARS
|
|
|
|
|
default n
|
|
|
|
|
---help---
|
|
|
|
|
This module installs a reboot hook, such that if reboot() is
|
|
|
|
|
invoked with a string argument NNN, "NNN" is copied to the
|
|
|
|
|
"LoaderEntryOneShot" EFI variable, to be read by the
|
|
|
|
|
bootloader. If the string matches one of the boot labels
|
|
|
|
|
defined in its configuration, the bootloader will boot once
|
|
|
|
|
to that label. The "LoaderEntryRebootReason" EFI variable is
|
|
|
|
|
set with the reboot reason: "reboot" or "shutdown". The
|
|
|
|
|
bootloader reads this reboot reason and takes particular
|
|
|
|
|
action according to its policy.
|
|
|
|
|
|
2016-04-26 04:07:01 +08:00
|
|
|
config EFI_CAPSULE_LOADER
|
|
|
|
|
tristate "EFI capsule loader"
|
|
|
|
|
depends on EFI
|
|
|
|
|
help
|
|
|
|
|
This option exposes a loader interface "/dev/efi_capsule_loader" for
|
|
|
|
|
users to load EFI capsules. This driver requires working runtime
|
|
|
|
|
capsule support in the firmware, which many OEMs do not provide.
|
|
|
|
|
|
|
|
|
|
Most users should say N.
|
|
|
|
|
|
2017-06-02 21:52:04 +08:00
|
|
|
config EFI_CAPSULE_QUIRK_QUARK_CSH
|
|
|
|
|
boolean "Add support for Quark capsules with non-standard headers"
|
|
|
|
|
depends on X86 && !64BIT
|
|
|
|
|
select EFI_CAPSULE_LOADER
|
|
|
|
|
default y
|
|
|
|
|
help
|
|
|
|
|
Add support for processing Quark X1000 EFI capsules, whose header
|
|
|
|
|
layout deviates from the layout mandated by the UEFI specification.
|
|
|
|
|
|
2016-08-25 11:15:31 +08:00
|
|
|
config EFI_TEST
|
|
|
|
|
tristate "EFI Runtime Service Tests Support"
|
|
|
|
|
depends on EFI
|
|
|
|
|
default n
|
|
|
|
|
help
|
|
|
|
|
This driver uses the efi.<service> function pointers directly instead
|
|
|
|
|
of going through the efivar API, because it is not trying to test the
|
|
|
|
|
kernel subsystem, just for testing the UEFI runtime service
|
|
|
|
|
interfaces which are provided by the firmware. This driver is used
|
|
|
|
|
by the Firmware Test Suite (FWTS) for testing the UEFI runtime
|
|
|
|
|
interfaces readiness of the firmware.
|
|
|
|
|
Details for FWTS are available from:
|
|
|
|
|
<https://wiki.ubuntu.com/FirmwareTestSuite>
|
|
|
|
|
|
|
|
|
|
Say Y here to enable the runtime services support via /dev/efi_test.
|
|
|
|
|
If unsure, say N.
|
|
|
|
|
|
x86/efi: Retrieve and assign Apple device properties
Apple's EFI drivers supply device properties which are needed to support
Macs optimally. They contain vital information which cannot be obtained
any other way (e.g. Thunderbolt Device ROM). They're also used to convey
the current device state so that OS drivers can pick up where EFI
drivers left (e.g. GPU mode setting).
There's an EFI driver dubbed "AAPL,PathProperties" which implements a
per-device key/value store. Other EFI drivers populate it using a custom
protocol. The macOS bootloader /System/Library/CoreServices/boot.efi
retrieves the properties with the same protocol. The kernel extension
AppleACPIPlatform.kext subsequently merges them into the I/O Kit
registry (see ioreg(8)) where they can be queried by other kernel
extensions and user space.
This commit extends the efistub to retrieve the device properties before
ExitBootServices is called. It assigns them to devices in an fs_initcall
so that they can be queried with the API in <linux/property.h>.
Note that the device properties will only be available if the kernel is
booted with the efistub. Distros should adjust their installers to
always use the efistub on Macs. grub with the "linux" directive will not
work unless the functionality of this commit is duplicated in grub.
(The "linuxefi" directive should work but is not included upstream as of
this writing.)
The custom protocol has GUID 91BD12FE-F6C3-44FB-A5B7-5122AB303AE0 and
looks like this:
typedef struct {
unsigned long version; /* 0x10000 */
efi_status_t (*get) (
IN struct apple_properties_protocol *this,
IN struct efi_dev_path *device,
IN efi_char16_t *property_name,
OUT void *buffer,
IN OUT u32 *buffer_len);
/* EFI_SUCCESS, EFI_NOT_FOUND, EFI_BUFFER_TOO_SMALL */
efi_status_t (*set) (
IN struct apple_properties_protocol *this,
IN struct efi_dev_path *device,
IN efi_char16_t *property_name,
IN void *property_value,
IN u32 property_value_len);
/* allocates copies of property name and value */
/* EFI_SUCCESS, EFI_OUT_OF_RESOURCES */
efi_status_t (*del) (
IN struct apple_properties_protocol *this,
IN struct efi_dev_path *device,
IN efi_char16_t *property_name);
/* EFI_SUCCESS, EFI_NOT_FOUND */
efi_status_t (*get_all) (
IN struct apple_properties_protocol *this,
OUT void *buffer,
IN OUT u32 *buffer_len);
/* EFI_SUCCESS, EFI_BUFFER_TOO_SMALL */
} apple_properties_protocol;
Thanks to Pedro Vilaça for this blog post which was helpful in reverse
engineering Apple's EFI drivers and bootloader:
https://reverse.put.as/2016/06/25/apple-efi-firmware-passwords-and-the-scbo-myth/
If someone at Apple is reading this, please note there's a memory leak
in your implementation of the del() function as the property struct is
freed but the name and value allocations are not.
Neither the macOS bootloader nor Apple's EFI drivers check the protocol
version, but we do to avoid breakage if it's ever changed. It's been the
same since at least OS X 10.6 (2009).
The get_all() function conveniently fills a buffer with all properties
in marshalled form which can be passed to the kernel as a setup_data
payload. The number of device properties is dynamic and can change
between a first invocation of get_all() (to determine the buffer size)
and a second invocation (to retrieve the actual buffer), hence the
peculiar loop which does not finish until the buffer size settles.
The macOS bootloader does the same.
The setup_data payload is later on unmarshalled in an fs_initcall. The
idea is that most buses instantiate devices in "subsys" initcall level
and drivers are usually bound to these devices in "device" initcall
level, so we assign the properties in-between, i.e. in "fs" initcall
level.
This assumes that devices to which properties pertain are instantiated
from a "subsys" initcall or earlier. That should always be the case
since on macOS, AppleACPIPlatformExpert::matchEFIDevicePath() only
supports ACPI and PCI nodes and we've fully scanned those buses during
"subsys" initcall level.
The second assumption is that properties are only needed from a "device"
initcall or later. Seems reasonable to me, but should this ever not work
out, an alternative approach would be to store the property sets e.g. in
a btree early during boot. Then whenever device_add() is called, an EFI
Device Path would have to be constructed for the newly added device,
and looked up in the btree. That way, the property set could be assigned
to the device immediately on instantiation. And this would also work for
devices instantiated in a deferred fashion. It seems like this approach
would be more complicated and require more code. That doesn't seem
justified without a specific use case.
For comparison, the strategy on macOS is to assign properties to objects
in the ACPI namespace (AppleACPIPlatformExpert::mergeEFIProperties()).
That approach is definitely wrong as it fails for devices not present in
the namespace: The NHI EFI driver supplies properties for attached
Thunderbolt devices, yet on Macs with Thunderbolt 1 only one device
level behind the host controller is described in the namespace.
Consequently macOS cannot assign properties for chained devices. With
Thunderbolt 2 they started to describe three device levels behind host
controllers in the namespace but this grossly inflates the SSDT and
still fails if the user daisy-chained more than three devices.
We copy the property names and values from the setup_data payload to
swappable virtual memory and afterwards make the payload available to
the page allocator. This is just for the sake of good housekeeping, it
wouldn't occupy a meaningful amount of physical memory (4444 bytes on my
machine). Only the payload is freed, not the setup_data header since
otherwise we'd break the list linkage and we cannot safely update the
predecessor's ->next link because there's no locking for the list.
The payload is currently not passed on to kexec'ed kernels, same for PCI
ROMs retrieved by setup_efi_pci(). This can be added later if there is
demand by amending setup_efi_state(). The payload can then no longer be
made available to the page allocator of course.
Tested-by: Lukas Wunner <lukas@wunner.de> [MacBookPro9,1]
Tested-by: Pierre Moreau <pierre.morrow@free.fr> [MacBookPro11,3]
Signed-off-by: Lukas Wunner <lukas@wunner.de>
Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
Cc: Andreas Noever <andreas.noever@gmail.com>
Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Pedro Vilaça <reverser@put.as>
Cc: Peter Jones <pjones@redhat.com>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: grub-devel@gnu.org
Cc: linux-efi@vger.kernel.org
Link: http://lkml.kernel.org/r/20161112213237.8804-9-matt@codeblueprint.co.uk
Signed-off-by: Ingo Molnar <mingo@kernel.org>
2016-11-13 05:32:36 +08:00
|
|
|
config APPLE_PROPERTIES
|
|
|
|
|
bool "Apple Device Properties"
|
|
|
|
|
depends on EFI_STUB && X86
|
|
|
|
|
select EFI_DEV_PATH_PARSER
|
|
|
|
|
select UCS2_STRING
|
|
|
|
|
help
|
|
|
|
|
Retrieve properties from EFI on Apple Macs and assign them to
|
|
|
|
|
devices, allowing for improved support of Apple hardware.
|
|
|
|
|
Properties that would otherwise be missing include the
|
|
|
|
|
Thunderbolt Device ROM and GPU configuration data.
|
|
|
|
|
|
|
|
|
|
If unsure, say Y if you have a Mac. Otherwise N.
|
|
|
|
|
|
2017-08-25 23:50:15 +08:00
|
|
|
config RESET_ATTACK_MITIGATION
|
|
|
|
|
bool "Reset memory attack mitigation"
|
|
|
|
|
depends on EFI_STUB
|
|
|
|
|
help
|
|
|
|
|
Request that the firmware clear the contents of RAM after a reboot
|
|
|
|
|
using the TCG Platform Reset Attack Mitigation specification. This
|
|
|
|
|
protects against an attacker forcibly rebooting the system while it
|
|
|
|
|
still contains secrets in RAM, booting another OS and extracting the
|
|
|
|
|
secrets.
|
|
|
|
|
|
2013-02-08 23:48:51 +08:00
|
|
|
endmenu
|
2013-12-16 22:39:40 +08:00
|
|
|
|
|
|
|
|
config UEFI_CPER
|
|
|
|
|
bool
|
2016-11-13 05:32:34 +08:00
|
|
|
|
|
|
|
|
config EFI_DEV_PATH_PARSER
|
|
|
|
|
bool
|
|
|
|
|
depends on ACPI
|
|
|
|
|
default n
|