Merge tag 'u-boot-atmel-fixes-2021.01-b' of https://gitlab.denx.de/u-boot/custodians...

[platform/kernel/u-boot.git] / lib / efi_loader / Kconfig

diff --git a/lib/efi_loader/Kconfig b/lib/efi_loader/Kconfig
index 6c9df3a..7fd3a3c 100644 (file)
--- a/lib/efi_loader/Kconfig
+++ b/lib/efi_loader/Kconfig
@@ -27,6 +27,56 @@ config EFI_LOADER
 
 if EFI_LOADER
 
+config EFI_SETUP_EARLY
+       bool
+       default n
+
+choice
+       prompt "Store for non-volatile UEFI variables"
+       default EFI_VARIABLE_FILE_STORE
+       help
+         Select where non-volatile UEFI variables shall be stored.
+
+config EFI_VARIABLE_FILE_STORE
+       bool "Store non-volatile UEFI variables as file"
+       depends on FAT_WRITE
+       help
+         Select this option if you want non-volatile UEFI variables to be
+         stored as file /ubootefi.var on the EFI system partition.
+
+config EFI_MM_COMM_TEE
+       bool "UEFI variables storage service via OP-TEE"
+       depends on OPTEE
+       help
+         If OP-TEE is present and running StandAloneMM, dispatch all UEFI
+         variable related operations to that. The application will verify,
+         authenticate and store the variables on an RPMB.
+
+endchoice
+
+config EFI_VARIABLES_PRESEED
+       bool "Initial values for UEFI variables"
+       depends on EFI_VARIABLE_FILE_STORE
+       help
+         Include a file with the initial values for non-volatile UEFI variables
+         into the U-Boot binary. If this configuration option is set, changes
+         to authentication related variables (PK, KEK, db, dbx) are not
+         allowed.
+
+if EFI_VARIABLES_PRESEED
+
+config EFI_VAR_SEED_FILE
+       string "File with initial values of non-volatile UEFI variables"
+       default ubootefi.var
+       help
+         File with initial values of non-volatile UEFI variables. The file must
+         be in the same format as the storage in the EFI system partition. The
+         easiest way to create it is by setting the non-volatile variables in
+         U-Boot. If a relative file path is used, it is relative to the source
+         directory.
+
+endif
+
 config EFI_GET_TIME
        bool "GetTime() runtime service"
        depends on DM_RTC
@@ -38,6 +88,7 @@ config EFI_GET_TIME
 config EFI_SET_TIME
        bool "SetTime() runtime service"
        depends on EFI_GET_TIME
+       default y if ARCH_QEMU || SANDBOX
        default n
        help
          Provide the SetTime() runtime service at boottime. This service
@@ -118,6 +169,7 @@ config EFI_HAVE_RUNTIME_RESET
 
 config EFI_GRUB_ARM32_WORKAROUND
        bool "Workaround for GRUB on 32bit ARM"
+       default n if ARCH_QEMU
        default y
        depends on ARM && !ARM64
        help
@@ -133,6 +185,13 @@ config EFI_RNG_PROTOCOL
          Provide a EFI_RNG_PROTOCOL implementation using the hardware random
          number generator of the platform.
 
+config EFI_TCG2_PROTOCOL
+       bool "EFI_TCG2_PROTOCOL support"
+       depends on TPM_V2
+       help
+         Provide a EFI_TCG2_PROTOCOL implementation using the TPM hardware
+         of the platform.
+
 config EFI_LOAD_FILE2_INITRD
        bool "EFI_FILE_LOAD2_PROTOCOL for Linux initial ramdisk"
        default n
@@ -159,6 +218,7 @@ config EFI_SECURE_BOOT
        select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
        select X509_CERTIFICATE_PARSER
        select PKCS7_MESSAGE_PARSER
+       select PKCS7_VERIFY
        default n
        help
          Select this option to enable EFI secure boot support.
@@ -166,13 +226,4 @@ config EFI_SECURE_BOOT
          it is signed with a trusted key. To do that, you need to install,
          at least, PK, KEK and db.
 
-config EFI_MM_COMM_TEE
-       bool "UEFI variables storage service via OP-TEE"
-       depends on OPTEE
-       default n
-       help
-         If OP-TEE is present and running StandAloneMM, dispatch all UEFI variable
-         related operations to that. The application will verify, authenticate and
-         store the variables on an RPMB.
-
 endif