summaryrefslogtreecommitdiff
path: root/Core/EM/SecurityPkg/ImageVerificationLib/ImageVerificationLib.sdl
blob: 73e98c0ff4f9892f876d6a4162c6cce79fb3cacf (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
TOKEN
	Name  = "ImageVerification_SUPPORT"
	Value  = "1"
	Help  = "Main switch to enable Crypto library support in Project"
	TokenType = Boolean
	TargetMAK = Yes
	TargetH = Yes
	Master = Yes
End

TOKEN
	Name  = "ENABLE_IMAGE_EXEC_POLICY_OVERRIDE"
	Value  = "0"
	Help  = "Enable user override of Image Execution policy"
	TokenType = Boolean
	TargetH = Yes
End

TOKEN
	Name  = "ENABLE_IMAGE_EXEC_POLICY_OVERRIDE"
	Value  = "1"
	TokenType = Boolean
	TargetH = Yes
	Token = "DEBUG_MODE" "=" "1"    
End

TOKEN
	Name  = "LOAD_FROM_FV"
	Value  = "0"
	Help  = "Load image from Internal FV. Possible options:\0-ALWAYS_EXECUTE; 1-NEVER_EXECUTE; 2-ALLOW_EXECUTE_ON_SECURITY_VIOLATION;\3-DEFER_EXECUTE_ON_SECURITY_VIOLATION; 4-DENY_EXECUTE_ON_SECURITY_VIOLATION; 5-QUERY_USER_ON_SECURITY_VIOLATION"
	TokenType = Integer
	TargetH = Yes
	Lock = Yes
	Range	= "Supported options: 0"
End

TOKEN
	Name  = "LOAD_FROM_OROM"
	Value  = "4"
	Help  = "Load image from Option ROM"
	TokenType = Integer
	TargetH = Yes
	Range	= "Supported options: 3,4,5"
End

TOKEN
	Name  = "LOAD_FROM_REMOVABLE_MEDIA"
	Value  = "4"
	Help  = "Load image from Removable Media"
	TokenType = Integer
	TargetH = Yes
	Range	= "Supported options: 3,4,5"
End

TOKEN
	Name  = "LOAD_FROM_FIXED_MEDIA"
	Value  = "4"
	Help  = "Load image from Fixed Media"
	TokenType = Integer
	TargetH = Yes
	Range	= "Supported options: 3,4,5"
End

TOKEN
	Name  = "INSTALL_DUMMY_SECURITY_PROTOCOL"
	Value  = "0"
	Help  = "When this token is 'on', the Core publishes dummy instance of the security protocol.\The security protocol is one of the architectural protocols and as such must be available.\The default value is 'on'.  \Set to 'off' if project includes driver that publishes the security protocol.\"
	TokenType = Boolean
	TargetH = Yes
End

TOKEN
    Name  = "LOAD_UNSIGNED_EMBEDDED_SHELL"
    Value  = "0"
    Help  = "Load Shell from Internal FV"
    TokenType = Boolean
    TargetH = Yes
End

TOKEN
    Name  = "LOAD_UNSIGNED_EMBEDDED_SHELL"
    Value  = "1"
    TokenType = Boolean
    TargetH = Yes
    Token = "DEBUG_MODE" "=" "1"
End

TOKEN
	Name  = "IMAGEVERIFY_LIB"
	Value  = "$$(LIB_BUILD_DIR)\ImageVerificationLib.lib"
	TokenType = Expression
	TargetMAK = Yes
End

PATH
	Name  = "ImageVerificationLib_DIR"
	Help  = "Path to Crypto library Module in Project"
End

MODULE
	Help  = "Includes ImageVerificationLib.mak to Project"
	File  = "ImageVerificationLib.mak"
End

ELINK
    Name  = "InstallSecurityArchProtocol,"
    Parent  = "DxeCoreInitialize"
    InvokeOrder = AfterParent
End