EDK2/edk2-rk3588
1
0
Fork 0
mirror of https://github.com/edk2-porting/edk2-rk3588.git synced 2025-12-17 19:14:40 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix networking after EDK2 update

Browse Source 
Latest EDK2 requires a proper RNG driver in order to use network boot
(CVE-2023-45237).

We ought to implement one, but for now bypass this check.

Signed-off-by: Mario Bălănică <mariobalanica02@gmail.com>
This commit is contained in:
Mario Bălănică
2024-06-23 04:01:20 +03:00
parent f0727b8e35
commit 1bb15338fc
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
edk2-rockchip/Silicon/Rockchip/FvMainModules.fdf.inc
View File

@@ -27,6 +27,8 @@
INF SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf
INF SecurityPkg/VariableAuthenticated/SecureBootDefaultKeysDxe/SecureBootDefaultKeysDxe.inf
!endif
INF SecurityPkg/RandomNumberGenerator/RngDxe/RngDxe.inf
INF SecurityPkg/Hash2DxeCrypto/Hash2DxeCrypto.inf
#
# Status LED support

9
edk2-rockchip/Silicon/Rockchip/Rockchip.dsc.inc
View File

@@ -210,7 +210,7 @@
CapsuleLib|MdeModulePkg/Library/DxeCapsuleLibNull/DxeCapsuleLibNull.inf
OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
RngLib|MdePkg/Library/BaseRngLibTimerLib/BaseRngLibTimerLib.inf
RngLib|MdeModulePkg/Library/BaseRngLibTimerLib/BaseRngLibTimerLib.inf
IntrinsicLib|CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
FmpAuthenticationLib|SecurityPkg/Library/FmpAuthenticationLibPkcs7/FmpAuthenticationLibPkcs7.inf
@@ -469,6 +469,11 @@ FspiLib|Silicon/Rockchip/Library/FspiLib/FspiLib.inf
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize|0x2000
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxAuthVariableSize|0x2800
#
# Do not enforce proper RNG support for now.
#
gEfiNetworkPkgTokenSpaceGuid.PcdEnforceSecureRngAlgorithms|FALSE
[PcdsDynamicHii.common.DEFAULT]
gEfiMdePkgTokenSpaceGuid.PcdPlatformBootTimeOut|L"Timeout"|gEfiGlobalVariableGuid|0x0|10 # Variable: L"Timeout"
@@ -531,6 +536,8 @@ FspiLib|Silicon/Rockchip/Library/FspiLib/FspiLib.inf
<LibraryClasses>
PcdLib|MdePkg/Library/DxePcdLib/DxePcdLib.inf
}
SecurityPkg/RandomNumberGenerator/RngDxe/RngDxe.inf
SecurityPkg/Hash2DxeCrypto/Hash2DxeCrypto.inf
#
# Status LED support