TianoCore EDK2 master
Loading...
Searching...
No Matches
PlatformSecureLibNull.c File Reference

Go to the source code of this file.

Functions

BOOLEAN EFIAPI UserPhysicalPresent (VOID)
 
RETURN_STATUS EFIAPI PlatformSecureLibNullConstructor (VOID)
 

Variables

BOOLEAN mUserPhysicalPresence = FALSE
 

Detailed Description

NULL PlatformSecureLib instance does NOT really detect whether a physical present user exists but return TRUE directly. This instance can be used to verify security related features during platform enabling and development. It should be replaced by a platform-specific method(e.g. Button pressed) in a real platform for product.

Copyright (c) 2011 - 2018, Intel Corporation. All rights reserved.
SPDX-License-Identifier: BSD-2-Clause-Patent

Definition in file PlatformSecureLibNull.c.

Function Documentation

◆ PlatformSecureLibNullConstructor()

RETURN_STATUS EFIAPI PlatformSecureLibNullConstructor ( VOID  )

Save user physical presence state from a PCD to mUserPhysicalPresence.

Return values
EFI_SUCCESSPcdUserPhysicalPresence is got successfully.

Definition at line 50 of file PlatformSecureLibNull.c.

◆ UserPhysicalPresent()

BOOLEAN EFIAPI UserPhysicalPresent ( VOID  )

This function provides a platform-specific method to detect whether the platform is operating by a physically present user.

Programmatic changing of platform security policy (such as disable Secure Boot, or switch between Standard/Custom Secure Boot mode) MUST NOT be possible during Boot Services or after exiting EFI Boot Services. Only a physically present user is allowed to perform these operations.

NOTE THAT: This function cannot depend on any EFI Variable Service since they are not available when this function is called in AuthenticateVariable driver.

Return values
TRUEThe platform is operated by a physically present user.
FALSEThe platform is NOT operated by a physically present user.

Definition at line 35 of file PlatformSecureLibNull.c.

Variable Documentation

◆ mUserPhysicalPresence

BOOLEAN mUserPhysicalPresence = FALSE

Definition at line 14 of file PlatformSecureLibNull.c.