search

microsoft / secureboot_objects

Secure boot objects recommended by Microsoft.
Other
29 stars 9 forks source link

Feature: describe skusipolicy contents? #43

Closed Wack0 closed 7 months ago

Wack0 commented 7 months ago

The readme states that this repo exists partially for transparency purposes.

Boot applications from th1+ that are vulnerable to baton drop were revoked by skusipolicy due to lack of dbx space.

skusipolicy is currently a single blob containing opaque hashes.

Are there any plans to also describe the contents of skusipolicy in this repository, or, if not that, then in some other location?

Flickdm commented 7 months ago

Hey @Wack0, thanks for the comment. This repo is meant for general purpose UEFI Secure Boot Objects and not Windows specific payloads. At this time we don't have plans to describe SkuSiPolicy here. The information we've shared publicly on SkuSiPolicy may be found here.