diff options
| author | Eric van Gyzen <vangyzen@FreeBSD.org> | 2021-04-30 17:53:45 +0000 |
|---|---|---|
| committer | Eric van Gyzen <vangyzen@FreeBSD.org> | 2021-04-30 17:53:45 +0000 |
| commit | eda28feb2e070e21db3d50b3fc177f88380b8fb4 (patch) | |
| tree | fa9b1cf843d5ff1611b0ae7c4b9a2b1b982b426e /stand/efi/boot1/Makefile | |
| parent | 619fe095861274576a2cb45628076968051b1585 (diff) | |
| download | src-eda28feb2e070e21db3d50b3fc177f88380b8fb4.tar.gz src-eda28feb2e070e21db3d50b3fc177f88380b8fb4.zip | |
EFI secure boot VECTX related changes
When VECTX is enabled as a kernel option and non-EFI loaders are
built, many reads will fail due to the mis-match of whether
LOADER_VERIEXEC_VECTX or not in readin.h. Source that includes
bootstrap.h must ensure the kernel option agrees with the compile
time CFLAGS in the various make related files.
Submitted by: bret_ketchum@dell.com (original revision)
Reviewed by: sjg, bdrewery, dab, bret_ketchum@dell.com
MFC after: 1 week
Sponsored by: Dell EMC Isilon
Differential Revision: https://reviews.freebsd.org/D29993
Diffstat (limited to 'stand/efi/boot1/Makefile')
| -rw-r--r-- | stand/efi/boot1/Makefile | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/stand/efi/boot1/Makefile b/stand/efi/boot1/Makefile index 39dc4f8e70ad..af03e395b2a5 100644 --- a/stand/efi/boot1/Makefile +++ b/stand/efi/boot1/Makefile @@ -53,6 +53,8 @@ CFLAGS+= -DEFI_UFS_BOOT CFLAGS+= -DEFI_DEBUG .endif +.include "${BOOTSRC}/veriexec.mk" + # Always add MI sources and REGULAR efi loader bits .PATH: ${EFISRC}/loader/arch/${MACHINE} .PATH: ${EFISRC}/loader |