libsecureboot: allow control of when pseudo pcr is updatedDuring boot we only want to measure things which *must*be verified - this should provide more deterministic ordering.MFC r347981Review
libsecureboot: allow control of when pseudo pcr is updatedDuring boot we only want to measure things which *must*be verified - this should provide more deterministic ordering.MFC r347981Reviewed by: stevekSponsored by: Juniper NetworksDifferential Revision: https://reviews.freebsd.org/D20297
show more ...
libsecureboot: make it easier to customize trust anchorsAvoid making hash self-tests depend on X.509 certs.Include OpenPGP keys in trust store count.MFC of r347408Reviewed by: stevekSponsored
libsecureboot: make it easier to customize trust anchorsAvoid making hash self-tests depend on X.509 certs.Include OpenPGP keys in trust store count.MFC of r347408Reviewed by: stevekSponsored by: Juniper NetworksDifferential Revision: https://reviews.freebsd.org/D20208
Add support for loader veriexecAlso sbin/veriexec for mac_veriexecMFC r343281,344564-344568,344780,344784,345289,346070