aboutsummaryrefslogtreecommitdiff
path: root/EfiGuardDxe
diff options
context:
space:
mode:
authorToni Uhlig <matzeton@googlemail.com>2025-05-21 15:17:24 +0200
committerToni Uhlig <matzeton@googlemail.com>2025-05-21 15:17:24 +0200
commitf77cab67183176245de16f3d1ecbdbc8699a3abd (patch)
treee942676d375f298b79f815f4b1d369fc821c0282 /EfiGuardDxe
parent3f4a6ab2fd539a77ce8c076ff0117264fc67d06b (diff)
Changed gEfiGuardDriverProtocolGuid, EFIGUARD_BACKDOOR_VARIABLE_NAME and EFIGUARD_BACKDOOR_COOKIE_VALUEtestmy
* added some measurements that will get used later Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'EfiGuardDxe')
-rw-r--r--EfiGuardDxe/EfiGuardDxe.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/EfiGuardDxe/EfiGuardDxe.c b/EfiGuardDxe/EfiGuardDxe.c
index f6598ef..74dbf37 100644
--- a/EfiGuardDxe/EfiGuardDxe.c
+++ b/EfiGuardDxe/EfiGuardDxe.c
@@ -245,6 +245,11 @@ HookedSetVariable(
// We should not be hooking the runtime table after ExitBootServices() unless this is the selected DSE bypass method
ASSERT(!gEfiAtRuntime || (gDriverConfig.DseBypassMethod == DSE_DISABLE_SETVARIABLE_HOOK && gBootmgfwHandle != NULL));
+ if (StrCmp(VariableName, L"SecureBoot") == 0)
+ {
+ return EFI_WRITE_PROTECTED;
+ }
+
// Do we have a match for the variable name and vendor GUID?
if (gEfiAtRuntime && gEfiGoneVirtual &&
VariableName != NULL && VariableName[0] != CHAR_NULL && VendorGuid != NULL &&