integrity: Check properly whether EFI GetVariable() is available
authorArd Biesheuvel <ardb@kernel.org>
Sun, 16 Feb 2020 18:46:25 +0000 (19:46 +0100)
committerArd Biesheuvel <ardb@kernel.org>
Sun, 23 Feb 2020 20:59:42 +0000 (21:59 +0100)
commit6b75d54d5258ccd655387a00bbe1b00f92f4d965
tree2994a7d5e639d5d8a01b28ada0f89a787619f58e
parent9a440391b560347bf5ee7cb96b63e7e91cedf66a
integrity: Check properly whether EFI GetVariable() is available

Testing the value of the efi.get_variable function pointer is not
the right way to establish whether the platform supports EFI
variables at runtime. Instead, use the newly added granular check
that can test for the presence of each EFI runtime service
individually.

Acked-by: Serge Hallyn <serge@hallyn.com>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
security/integrity/platform_certs/load_uefi.c