PlatformPKProtectionLibVarPolicy.c

Go to the documentation of this file.

 
#include <Uefi.h>
#include <Protocol/VariablePolicy.h>
 
#include <Library/DebugLib.h>
#include <Library/UefiBootServicesTableLib.h>
 
EFI_STATUS
EFIAPI
DisablePKProtection (
  VOID
  )
{
  EFI_STATUS                      Status;
  EDKII_VARIABLE_POLICY_PROTOCOL  *VariablePolicy;
 
  DEBUG ((DEBUG_INFO, "%a() Entry...\n", __func__));
 
  // IMPORTANT NOTE: This operation is sticky and leaves variable protections disabled.
  //                  The system *MUST* be reset after performing this operation.
  Status = gBS->LocateProtocol (&gEdkiiVariablePolicyProtocolGuid, NULL, (VOID **)&VariablePolicy);
  if (!EFI_ERROR (Status)) {
    Status = VariablePolicy->DisableVariablePolicy ();
    // EFI_ALREADY_STARTED means that everything is currently disabled.
    // This should be considered SUCCESS.
    if (Status == EFI_ALREADY_STARTED) {
      Status = EFI_SUCCESS;
    }
  }
 
  return Status;
}