Messages in this thread | ![/](/images/icornerl.gif) | | Date | Mon, 7 Nov 2011 21:36:23 +0000 | From | Matthew Garrett <> | Subject | Re: [PATCH v3] x86, efi: Calling __pa() with an ioremap'd address is invalid |
| |
On Mon, Nov 07, 2011 at 01:34:01PM -0800, H. Peter Anvin wrote: > On 11/07/2011 01:23 PM, Matthew Garrett wrote: > > > > I know. But we also have to handle being called after > > ExitBootServices(). There are going to be people who don't want to deal > > with signing their kernel builds. > > > > Could you clarify why these two are connected?
You can't execute anything unsigned until after ExitBootServices() has been called. Otherwise your bootloader is also a malware loader, and your signature probably gets blacklisted.
-- Matthew Garrett | mjg59@srcf.ucam.org
| ![\](/images/icornerr.gif) |