Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Changed gEfiGuardDriverProtocolGuid, EFIGUARD_BACKDOOR_VARIABLE_NAME and ↵testmy | Toni Uhlig | 2025-05-21 |
| | | | | | | | | EFIGUARD_BACKDOOR_COOKIE_VALUE * added some measurements that will get used later Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Revert "Changed protocol GUID, backdoor variable name and cookie value" | Toni Uhlig | 2025-04-23 |
| | | | | This reverts commit 60c4ec50b21b35ef49900abee704a39e0ea4ec17. | ||
* | Changed protocol GUID, backdoor variable name and cookie value | Toni Uhlig | 2025-04-23 |
| | | | | | | | * fixed EfiDSEFix Mingw Makefile * removed `EFIAPI` from some imports Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Update README | Toni Uhlig | 2025-04-23 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Compile `EfiDSEFix` with Mingw64 | Toni Uhlig | 2025-04-23 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Support custom EfiGuard driver filenames by specifing `-D ↵ | Toni Uhlig | 2025-04-23 |
| | | | | | | | | EFIGUARD_DRIVER_FILENAME="something.efi"`. * useful for testing multiple EfiGuard builds Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Added partial PatchGuard disable at compile time with `-D EAC_COMPAT_MODE=1`. | Toni Uhlig | 2025-04-23 |
| | | | | | | | | * runtime DSE disabling still possible * compatible with EasyAntiCheat * no bsod so far Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Disable PatchGuard at compile time with `-D DO_NOT_DISABLE_PATCHGUARD=1`. | Toni Uhlig | 2025-04-23 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Changed EfiGaurd title to something more "neutral" ;) | Toni Uhlig | 2025-04-23 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | Add VeraCrypt support (#136) | worldwidefuckfest | 2025-02-24 |
| | |||
* | Fix build with current EDK2 master | Matthijs Lavrijsen | 2025-01-17 |
| | | | | | | | | Re-add the missing headers for EFI_LEGACY_BIOS_PROTOCOL and gEfiLegacyBiosGuid which were removed from OvmfPkg in https://github.com/tianocore/edk2/commit/9d4becddbad24ca00b01d68087e0e86d33ec92b6. Neither OVMF nor EfiGuard actually *needs* the CSM for anything, but being able to check for the presence of the legacy BIOS protocol is still important in order to determine if we are actually booting a legacy BIOS boot option. This allows us to then inform the user that what they are doing is not suppported and most likely a mistake. Fixes #119 | ||
* | Fix build with current EDK2 master | Matthijs Lavrijsen | 2025-01-17 |
| | | | | | | | | Override the unwanted /GS flag addition (MSVC) and -fno-stack-protector removal (GCC) introduced in https://github.com/tianocore/edk2/commit/f53f029122d4493e9db95e2424dd8f067f247661 Additionally remove some other (less harmful but still unwanted) build flags that have been made the default in MSVC in the .vcxproj/.props files as well. Fixes #134 | ||
* | Misc. minor warning fixes | Matthijs Lavrijsen | 2025-01-17 |
| | |||
* | Loader: do not pass load options to auto-generated boot entries | Matthijs Lavrijsen | 2024-01-21 |
| | |||
* | Use case-insensitive string comparison when checking file names | Matthijs Lavrijsen | 2024-01-21 |
| | |||
* | Loader: close root volume handle in LocateFile() | Matthijs Lavrijsen | 2024-01-21 |
| | |||
* | Pedantic assert fix in SetVariable hook | Matthijs Lavrijsen | 2024-01-20 |
| | |||
* | Drop /MERGE from linker flags in DSCv1.4 | Matthijs Lavrijsen | 2023-10-15 |
| | |||
* | KiSwInterrupt patch: reuse INIT section as PG context | Matthijs Lavrijsen | 2023-10-15 |
| | | | | INIT is already discardable (and exists in all NT kernels), no need to obtain INITDATA separately. | ||
* | Fix build with GCC toolchain | Matthijs Lavrijsen | 2023-10-14 |
| | |||
* | EfiDSEFix: do not request UAC elevation in manifest | Matthijs Lavrijsen | 2023-10-14 |
| | | | | | | This works around a Windows Shell issue when launching console applications that require admin elevation (this includes EfiDSEFix) from an unelevated command prompt while having UAC enabled. Fixes #75 | ||
* | Always use CopyWpMem in SetVariable hook | Matthijs Lavrijsen | 2023-10-14 |
| | |||
* | Check CR4_CET.SH_STK_EN before adjusting shadow stack | Matthijs Lavrijsen | 2023-10-14 |
| | |||
* | Update README.md | Matthijs Lavrijsen | 2023-10-12 |
| | |||
* | Loader: make driver configuration a runtime option | Matthijs Lavrijsen | 2023-10-12 |
| | | | | | The interactive driver configuration now requires the HOME key to be pressed when the loader is started. If it is not pressed, the default configuration will be used as before. The CONFIGURE_DRIVER compile time define is no longer useful due to this change and has been removed. | ||
* | Use EFI_SIMPLE_TEXT_INPUT_EX_PROTOCOL if available | Matthijs Lavrijsen | 2023-10-12 |
| | |||
* | Loader: report POST codes when booting | Matthijs Lavrijsen | 2023-10-12 |
| | |||
* | Update README.md | Matthijs Lavrijsen | 2023-10-10 |
| | |||
* | GitHub: add code of conduct, issue templates | Matthijs Lavrijsen | 2023-10-04 |
| | |||
* | Fix KiVerifyScopesExecute signature for LA57 kernel | Matthijs Lavrijsen | 2023-10-03 |
| | | | | ntkrla57.exe uses AND with r/m32 here rather than r/m64, which the signature was needlessly specific about by including a REX prefix | ||
* | Add updated decode search for OslFwpKernelSetupPhase1 | Matthijs Lavrijsen | 2023-10-03 |
| | |||
* | KiSwInterrupt patch: change the PG context address instead if possible | Matthijs Lavrijsen | 2023-10-01 |
| | | | | Reference: #101 | ||
* | Disable CET when clearing CR0.WP | Matthijs Lavrijsen | 2023-09-27 |
| | |||
* | EfiGuardDxe: delay driver unload when a non-Windows OS is booted | Matthijs Lavrijsen | 2023-09-26 |
| | | | | Fixes #91 | ||
* | Loader: continue booting if the driver is already loaded | Matthijs Lavrijsen | 2023-09-25 |
| | |||
* | EfiDSEFix: acquire SE_DEBUG_PRIVILEGE when finding kernel addresses | Matthijs Lavrijsen | 2023-07-31 |
| | | | | Fixes #97 | ||
* | Fix build with current EDK2 master | Matthijs Lavrijsen | 2023-06-22 |
| | | | | Rename RUNTIME_FUNCTION to resolve a conflict with edk2's incomplete redefinition added in https://github.com/tianocore/edk2/commit/ff52068d9261b9391d75b83a2a4e40e040f3b6eb | ||
* | Update README.md | Matthijs Lavrijsen | 2023-06-21 |
| | |||
* | EfiDSEFix: print help text on invalid usage | Matthijs Lavrijsen | 2023-05-31 |
| | |||
* | Handle 5-level paging when checking canonical address bits | Matthijs Lavrijsen | 2023-04-26 |
| | |||
* | EfiGuardDxe: distinguish between winload and kernel build numbers | Matthijs Lavrijsen | 2023-04-03 |
| | |||
* | Clean up linker optionsv1.3 | Matthijs Lavrijsen | 2023-03-26 |
| | |||
* | RtlSleep: wait for a timer event instead of stalling | Matthijs Lavrijsen | 2023-03-26 |
| | |||
* | Loader: check entry descriptions to determine whether they are Windows | Matthijs Lavrijsen | 2023-03-26 |
| | |||
* | Loader: remove BdsLibConnectAllDriversToAllControllers | Matthijs Lavrijsen | 2023-03-26 |
| | | | | EfiBootManagerConnectAll provides this functionality now. | ||
* | Loader: minor SetHighestAvailableMode improvements | Matthijs Lavrijsen | 2023-03-26 |
| | | | | | - Add primitive aspect ratio weighting when determining which text mode is best - Move all uses of gST->ConOut to SetHighestAvailableTextMode and exit early if it is NULL | ||
* | Loader: handle EFI_SECURITY_VIOLATION from LoadImage | Matthijs Lavrijsen | 2023-03-26 |
| | | | | This behaviour matches that of edk2's UefiBootManagerLib since edk2 commit f7fdd620e8 | ||
* | EfiGuardDxe: clear and restore CR0.WP when copying | Matthijs Lavrijsen | 2023-03-26 |
| | | | | This is intended to deal with the UEFI memory protection protocol (EFI_MEMORY_ATTRIBUTE_PROTOCOL) introduced in the UEFI 2.10 specification. | ||
* | Add CopyWpMem and SetWpMem routines | Matthijs Lavrijsen | 2023-03-26 |
| | | | | Additionally make SetServicePointer also clear and restore CR0.WP if needed | ||
* | Update Zydis to v4 | Matthijs Lavrijsen | 2023-03-26 |
| |