summaryrefslogtreecommitdiff
path: root/arch/x86/kernel/ima_arch.c
diff options
context:
space:
mode:
authorArd Biesheuvel <ardb@kernel.org>2020-01-23 15:09:35 +0300
committerArd Biesheuvel <ardb@kernel.org>2020-02-23 23:59:42 +0300
commit9a440391b560347bf5ee7cb96b63e7e91cedf66a (patch)
treecf404fe7823090701137e537accfe5fbd18cf9a6 /arch/x86/kernel/ima_arch.c
parent9b42f76ad58b3f641197d031766c6979acf4b4a6 (diff)
downloadlinux-9a440391b560347bf5ee7cb96b63e7e91cedf66a.tar.xz
x86/ima: Use EFI GetVariable only when available
Replace the EFI runtime services check with one that tells us whether EFI GetVariable() is implemented by the firmware. Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Diffstat (limited to 'arch/x86/kernel/ima_arch.c')
-rw-r--r--arch/x86/kernel/ima_arch.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/arch/x86/kernel/ima_arch.c b/arch/x86/kernel/ima_arch.c
index 4d4f5d9faac3..cb6ed616a543 100644
--- a/arch/x86/kernel/ima_arch.c
+++ b/arch/x86/kernel/ima_arch.c
@@ -19,7 +19,7 @@ static enum efi_secureboot_mode get_sb_mode(void)
size = sizeof(secboot);
- if (!efi_enabled(EFI_RUNTIME_SERVICES)) {
+ if (!efi_rt_services_supported(EFI_RT_SUPPORTED_GET_VARIABLE)) {
pr_info("ima: secureboot mode unknown, no efi\n");
return efi_secureboot_mode_unknown;
}