Skip to content

Commit 57329c8

Browse files
committed
efivar_signature_list: improve formatting
1 parent b2f1ae5 commit 57329c8

File tree

1 file changed

+15
-9
lines changed

1 file changed

+15
-9
lines changed

security/efivar_signature_list.ksy

Lines changed: 15 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -7,16 +7,22 @@ meta:
77
endian: le
88
doc: |
99
Parse UEFI variables db and dbx that contain signatures, certificates and
10-
hashes. On a Linux system using UEFI, these variables are readable from
11-
/sys/firmware/efi/efivars/db-d719b2cb-3d3a-4596-a3bc-dad00e67656f,
12-
/sys/firmware/efi/efivars/dbDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c,
13-
/sys/firmware/efi/efivars/dbx-d719b2cb-3d3a-4596-a3bc-dad00e67656f and
14-
/sys/firmware/efi/efivars/dbxDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c.
15-
("d719b2cb-3d3a-4596-a3bc-dad00e67656f" is defined as
16-
EFI_IMAGE_SECURITY_DATABASE_GUID and "8be4df61-93ca-11d2-aa0d-00e098032b8c"
17-
as EFI_GLOBAL_VARIABLE).
10+
hashes. On a Linux system using UEFI, these variables are readable from:
11+
12+
```
13+
/sys/firmware/efi/efivars/db-d719b2cb-3d3a-4596-a3bc-dad00e67656f
14+
/sys/firmware/efi/efivars/dbDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c
15+
/sys/firmware/efi/efivars/dbx-d719b2cb-3d3a-4596-a3bc-dad00e67656f
16+
/sys/firmware/efi/efivars/dbxDefault-8be4df61-93ca-11d2-aa0d-00e098032b8c
17+
```
18+
19+
Note:
20+
21+
* `d719b2cb-3d3a-4596-a3bc-dad00e67656f` is defined as `EFI_IMAGE_SECURITY_DATABASE_GUID`
22+
* `8be4df61-93ca-11d2-aa0d-00e098032b8c` is defined as `EFI_GLOBAL_VARIABLE`
23+
1824
Each file contains an EFI attribute (32-bit integer) followed by a list of
19-
EFI_SIGNATURE_LIST structures.
25+
`EFI_SIGNATURE_LIST` structures.
2026
doc-ref: https://uefi.org/sites/default/files/resources/UEFI_Spec_2_8_final.pdf
2127
seq:
2228
- id: var_attributes

0 commit comments

Comments
 (0)