MdePkg/MdeModulePkg/SecurityPkg Variable: Forbid creation of non-spec variables in EFI_GLOBAL_VARIABLE namespace.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Star Zeng <star.zeng@intel.com>
Reviewed-by: Liming Gao <liming.gao@intel.com>

git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@14560 6f19259b-4bc3-4df7-8a09-765794883524

2 files changed, 163 insertions, 28 deletions

diff --git a/MdePkg/Include/Guid/GlobalVariable.h b/MdePkg/Include/Guid/GlobalVariable.h
index 0f1c173f63..83450da857 100644
--- a/MdePkg/Include/Guid/GlobalVariable.h
+++ b/MdePkg/Include/Guid/GlobalVariable.h
@@ -1,7 +1,7 @@
 /** @file

   GUID for EFI (NVRAM) Variables.

 

-  Copyright (c) 2006 - 2009, Intel Corporation. All rights reserved.<BR>

+  Copyright (c) 2006 - 2013, Intel Corporation. All rights reserved.<BR>

   This program and the accompanying materials                          

   are licensed and made available under the terms and conditions of the BSD License         

   which accompanies this distribution.  The full text of the license may be found at        

@@ -24,4 +24,163 @@
 

 extern EFI_GUID gEfiGlobalVariableGuid;

 

+//

+// Follow UEFI 2.4 spec:

+// To prevent name collisions with possible future globally defined variables,

+// other internal firmware data variables that are not defined here must be

+// saved with a unique VendorGuid other than EFI_GLOBAL_VARIABLE or

+// any other GUID defined by the UEFI Specification. Implementations must

+// only permit the creation of variables with a UEFI Specification-defined

+// VendorGuid when these variables are documented in the UEFI Specification.

+//

+// Note: except the globally defined variables defined below, the spec also defines

+// L"Boot####"      - A boot load option.

+// L"Driver####"    - A driver load option.

+// L"Key####"       - Describes hot key relationship with a Boot#### load option.

+// The attribute for them is NV+BS+RT, #### is a printed hex value, and no 0x or h

+// is included in the hex value. They can not be expressed as a #define like other globally

+// defined variables, it is because we can not list the Boot0000, Boot0001, etc one by one.

+//

+

+///

+/// The language codes that the firmware supports. This value is deprecated.

+/// Its attribute is BS+RT.

+///

+#define EFI_LANG_CODES_VARIABLE_NAME                L"LangCodes"

+///

+/// The language code that the system is configured for. This value is deprecated.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_LANG_VARIABLE_NAME                      L"Lang"

+///

+/// The firmware's boot managers timeout, in seconds, before initiating the default boot selection.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_TIME_OUT_VARIABLE_NAME                  L"Timeout"

+///

+/// The language codes that the firmware supports.

+/// Its attribute is BS+RT.

+///

+#define EFI_PLATFORM_LANG_CODES_VARIABLE_NAME       L"PlatformLangCodes"

+///

+/// The language code that the system is configured for.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_PLATFORM_LANG_VARIABLE_NAME             L"PlatformLang"

+///

+/// The device path of the default input/output/error output console.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_CON_IN_VARIABLE_NAME                    L"ConIn"

+#define EFI_CON_OUT_VARIABLE_NAME                   L"ConOut"

+#define EFI_ERR_OUT_VARIABLE_NAME                   L"ErrOut"

+///

+/// The device path of all possible input/output/error output devices.

+/// Its attribute is BS+RT.

+///

+#define EFI_CON_IN_DEV_VARIABLE_NAME                L"ConInDev"

+#define EFI_CON_OUT_DEV_VARIABLE_NAME               L"ConOutDev"

+#define EFI_ERR_OUT_DEV_VARIABLE_NAME               L"ErrOutDev"

+///

+/// The ordered boot option load list.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_BOOT_ORDER_VARIABLE_NAME                L"BootOrder"

+///

+/// The boot option for the next boot only.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_BOOT_NEXT_VARIABLE_NAME                 L"BootNext"

+///

+/// The boot option that was selected for the current boot.

+/// Its attribute is BS+RT.

+///

+#define EFI_BOOT_CURRENT_VARIABLE_NAME              L"BootCurrent"

+///

+/// The types of boot options supported by the boot manager. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_BOOT_OPTION_SUPPORT_VARIABLE_NAME       L"BootOptionSupport"

+///

+/// The ordered driver load option list.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_DRIVER_ORDER_VARIABLE_NAME              L"DriverOrder"

+///

+/// Identifies the level of hardware error record persistence

+/// support implemented by the platform. This variable is

+/// only modified by firmware and is read-only to the OS.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_HW_ERR_REC_SUPPORT_VARIABLE_NAME        L"HwErrRecSupport"

+///

+/// Whether the system is operating in setup mode (1) or not (0).

+/// All other values are reserved. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_SETUP_MODE_NAME                         L"SetupMode"

+///

+/// The Key Exchange Key Signature Database.

+/// Its attribute is NV+BS+RT+AT.

+///

+#define EFI_KEY_EXCHANGE_KEY_NAME                   L"KEK"

+///

+/// The public Platform Key.

+/// Its attribute is NV+BS+RT+AT.

+///

+#define EFI_PLATFORM_KEY_NAME                       L"PK"

+///

+/// Array of GUIDs representing the type of signatures supported

+/// by the platform firmware. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_SIGNATURE_SUPPORT_NAME                  L"SignatureSupport"

+///

+/// Whether the platform firmware is operating in Secure boot mode (1) or not (0).

+/// All other values are reserved. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_SECURE_BOOT_MODE_NAME                   L"SecureBoot"

+///

+/// The OEM's default Key Exchange Key Signature Database. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_KEK_DEFAULT_VARIABLE_NAME               L"KEKDefault"

+///

+/// The OEM's default public Platform Key. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_PK_DEFAULT_VARIABLE_NAME                L"PKDefault"

+///

+/// The OEM's default secure boot signature store. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_DB_DEFAULT_VARIABLE_NAME                L"dbDefault"

+///

+/// The OEM's default secure boot blacklist signature store. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_DBX_DEFAULT_VARIABLE_NAME               L"dbxDefault"

+///

+/// The OEM's default secure boot timestamp signature store. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_DBT_DEFAULT_VARIABLE_NAME               L"dbtDefault"

+///

+/// Allows the firmware to indicate supported features and actions to the OS.

+/// Its attribute is BS+RT.

+///

+#define EFI_OS_INDICATIONS_SUPPORT_VARIABLE_NAME    L"OsIndicationsSupported"

+///

+/// Allows the OS to request the firmware to enable certain features and to take certain actions.

+/// Its attribute is NV+BS+RT.

+///

+#define EFI_OS_INDICATIONS_VARIABLE_NAME            L"OsIndications"

+///

+/// Whether the system is configured to use only vendor provided

+/// keys or not. Should be treated as read-only.

+/// Its attribute is BS+RT.

+///

+#define EFI_VENDOR_KEYS_VARIABLE_NAME               L"VendorKeys"

+

 #endif

diff --git a/MdePkg/Include/Guid/ImageAuthentication.h b/MdePkg/Include/Guid/ImageAuthentication.h
index 634fd655be..8b46e7356b 100644
--- a/MdePkg/Include/Guid/ImageAuthentication.h
+++ b/MdePkg/Include/Guid/ImageAuthentication.h
@@ -1,8 +1,7 @@
 /** @file

-  Platform Key, Key Exchange Key, and Image signature database are defined 

-  for the signed image validation.

+  Image signature database are defined for the signed image validation.

 

-  Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR>

+  Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.<BR>

   This program and the accompanying materials                          

   are licensed and made available under the terms and conditions of the BSD License         

   which accompanies this distribution.  The full text of the license may be found at        

@@ -35,35 +34,12 @@
 /// for the forbidden signature database.

 ///

 #define EFI_IMAGE_SECURITY_DATABASE1      L"dbx"

+

 #define SECURE_BOOT_MODE_ENABLE           1

 #define SECURE_BOOT_MODE_DISABLE          0

 #define SETUP_MODE                        1

 #define USER_MODE                         0

-///

-/// Globally "SetupMode" variable to specify whether the system is currently operating 

-/// in setup mode (1) or not (0). All other values are reserved.

-///

-#define EFI_SETUP_MODE_NAME               L"SetupMode"

-///

-/// Globally "PK" variable for the Platform Key Signature Database.

-///

-#define EFI_PLATFORM_KEY_NAME             L"PK"

-///

-/// Globally "KEK" variable for the Key Exchange Key Signature Database.

-///

-#define EFI_KEY_EXCHANGE_KEY_NAME         L"KEK"

-///

-/// Globally "SignatureSupport" variable returns an array of GUIDs, 

-/// with each GUID representing a type of signature which the platform 

-/// firmware supports for images and other data.

-///

-#define EFI_SIGNATURE_SUPPORT_NAME        L"SignatureSupport"

 

-///

-/// Globally "SecureBoot" variable to specify whether the platform firmware 

-/// is operating in Secure boot mode (1) or not (0). All other values are reserved.

-///

-#define EFI_SECURE_BOOT_MODE_NAME         L"SecureBoot"

 

 //***********************************************************************

 // Signature Database