Port SeaBIOS PCI oprom extraction in ram + measurement + load into coreboot

linuxboot / heads

A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.

https://osresearch.net/

GNU General Public License v2.0

1.41k stars 185 forks source link

Port SeaBIOS PCI oprom extraction in ram + measurement + load into coreboot #1792

Open tlaurion opened 2 weeks ago

tlaurion commented 2 weeks ago

Chainloading seabios -> linux payload would not be desired since seabios would actually lower security model.

What is desired is seabios extraction of oprom in ram, measuring it then loading it.

Discussed under https://matrix.to/#/!rsKWMJGPMsyPTTjXuh:matrix.org/$tfmbWeuklG258ig33TJMsVSdTvOosR7DvdodjyD_y9I?via=matrix.org&via=nitro.chat&via=fedora.im

Originally posted by @tlaurion in https://github.com/linuxboot/heads/issues/1752#issuecomment-2343938844