efi_loader: optional persistence of variables
authorTom Saeger <tom.saeger@oracle.com>
Tue, 22 Mar 2022 21:21:10 +0000 (15:21 -0600)
committerHeinrich Schuchardt <heinrich.schuchardt@canonical.com>
Sat, 9 Apr 2022 19:06:31 +0000 (21:06 +0200)
Since be66b89da306 ("efi_loader: configuration of variables store")
the choice of EFI_VARIABLE_FILE_STORE or EFI_MM_COMM_TEE
is mutually-exclusive, however efi_var_to_file also allows
for "neither". Provide an additional Kconfig option.

Signed-off-by: Tom Saeger <tom.saeger@oracle.com>
Reviewed-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>
lib/efi_loader/Kconfig

index 28657f5..759cd2a 100644 (file)
@@ -62,11 +62,18 @@ config EFI_MM_COMM_TEE
          variable related operations to that. The application will verify,
          authenticate and store the variables on an RPMB.
 
+config EFI_VARIABLE_NO_STORE
+       bool "Don't persist non-volatile UEFI variables"
+       help
+         If you choose this option, non-volatile variables cannot be persisted.
+         You could still provide non-volatile variables via
+         EFI_VARIABLES_PRESEED.
+
 endchoice
 
 config EFI_VARIABLES_PRESEED
        bool "Initial values for UEFI variables"
-       depends on EFI_VARIABLE_FILE_STORE
+       depends on !EFI_MM_COMM_TEE
        help
          Include a file with the initial values for non-volatile UEFI variables
          into the U-Boot binary. If this configuration option is set, changes