tree 6bae228377b6b2f1f7cb60ee6fbce40bcc65cf5e
parent cdd7857898c8d2a159118e663f59978e6b3542f2
author Ard Biesheuvel <ard.biesheuvel@linaro.org> 1396540018 +0200
committer Matt Fleming <matt.fleming@intel.com> 1398884226 +0100

efi/arm64: ignore dtb= when UEFI SecureBoot is enabled

Loading unauthenticated FDT blobs directly from storage is a security hazard,
so this should only be allowed when running with UEFI Secure Boot disabled.

Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: Leif Lindholm <leif.lindholm@linaro.org>
Acked-by: Catalin Marinas <catalin.marinas@arm.com>
Signed-off-by: Matt Fleming <matt.fleming@intel.com>