)]}' { "log": [ { "commit": "a910c096139769e35720174069e81e89bf90fdc6", "tree": "e67e7bd1e5eab3eb5cb6643599eb7d5d12c20ddd", "parents": [ "b53d06c577301000ad7921b28a76dcfd13b0fdcd" ], "author": { "name": "H.J. Lu", "email": "hjl.tools@gmail.com", "time": "Sat Feb 17 06:47:28 2018 -0800" }, "committer": { "name": "Robert Kolchmeyer", "email": "rkolchmeyer@google.com", "time": "Wed Aug 05 20:06:35 2020 -0700" }, "message": "grub-lakitu: FROMGIT: x86-64: Treat R_X86_64_PLT32 as R_X86_64_PC32\n\nStarting from binutils commit bd7ab16b4537788ad53521c45469a1bdae84ad4a:\n\nhttps://sourceware.org/git/?p\u003dbinutils-gdb.git;a\u003dcommit;h\u003dbd7ab16b4537788ad53521c45469a1bdae84ad4a\n\nx86-64 assembler generates R_X86_64_PLT32, instead of R_X86_64_PC32, for\n32-bit PC-relative branches. Grub2 should treat R_X86_64_PLT32 as\nR_X86_64_PC32.\n\nSigned-off-by: H.J. Lu \u003chjl.tools@gmail.com\u003e\nReviewed-by: Daniel Kiper \u003cdaniel.kiper@oracle.com\u003e\n(cherry picked from commit 842c390469e2c2e10b5aa36700324cd3bde25875\n https://git.savannah.gnu.org/git/grub.git master)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nBUG\u003db/162782466\nTEST\u003dshielded_vm_test\n\nChange-Id: Idb3bbdf6be15f2f0317b42a6e22e79de66f6103e\n" }, { "commit": "b53d06c577301000ad7921b28a76dcfd13b0fdcd", "tree": "155e848dbfa54d13dec2798db8936bc75e93e941", "parents": [ "7c9e5bf1e96e740cba2ddcb41f6ee80af09f632b" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Mon Jun 15 12:28:27 2020 -0400" }, "committer": { "name": "Robert Kolchmeyer", "email": "rkolchmeyer@google.com", "time": "Wed Aug 05 20:06:35 2020 -0700" }, "message": "grub-lakitu: BACKPORT: FROMGIT: malloc: Use overflow checking primitives where we do complex allocations\n\nThis attempts to fix the places where we do the following where\narithmetic_expr may include unvalidated data:\n\n X \u003d grub_malloc(arithmetic_expr);\n\nIt accomplishes this by doing the arithmetic ahead of time using grub_add(),\ngrub_sub(), grub_mul() and testing for overflow before proceeding.\n\nAmong other issues, this fixes:\n - allocation of integer overflow in grub_video_bitmap_create()\n reported by Chris Coulson,\n - allocation of integer overflow in grub_png_decode_image_header()\n reported by Chris Coulson,\n - allocation of integer overflow in grub_squash_read_symlink()\n reported by Chris Coulson,\n - allocation of integer overflow in grub_ext2_read_symlink()\n reported by Chris Coulson,\n - allocation of integer overflow in read_section_as_string()\n reported by Chris Coulson.\n\nFixes: CVE-2020-14309, CVE-2020-14310, CVE-2020-14311\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\nReviewed-by: Daniel Kiper \u003cdaniel.kiper@oracle.com\u003e\nUpstream-commit-id: 5fb2befbf04\n(cherry picked from commit b3dd39088e5b2efb190e33e2a0b71c9d1dc93118\n https://github.com/rhboot/grub2 fedora-31)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nConflicts:\n - grub-core/fs/btrfs.c: Adjusted context to match the headers that we\n have in this file\n - grub-core/loader/i386/bsd.c: Adjusted context to match the headers\n that we have in this file\n\nBUG\u003db/162782466\nTEST\u003dshielded_vm_test\n\nChange-Id: I06fca1da927c1922798d82e57e2942359935f453\n" }, { "commit": "7c9e5bf1e96e740cba2ddcb41f6ee80af09f632b", "tree": "975ab7ec37af2e44b36f9bf8c9e19cc5bb9c00f4", "parents": [ "35be53121f0fc0026c3af309a72de8dbde2da720" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Mon Jun 15 12:26:01 2020 -0400" }, "committer": { "name": "Robert Kolchmeyer", "email": "rkolchmeyer@google.com", "time": "Wed Aug 05 20:06:35 2020 -0700" }, "message": "grub-lakitu: BACKPORT: FROMGIT: calloc: Use calloc() at most places\n\nThis modifies most of the places we do some form of:\n\n X \u003d malloc(Y * Z);\n\nto use calloc(Y, Z) instead.\n\nAmong other issues, this fixes:\n - allocation of integer overflow in grub_png_decode_image_header()\n reported by Chris Coulson,\n - allocation of integer overflow in luks_recover_key()\n reported by Chris Coulson,\n - allocation of integer overflow in grub_lvm_detect()\n reported by Chris Coulson.\n\nFixes: CVE-2020-14308\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\nReviewed-by: Daniel Kiper \u003cdaniel.kiper@oracle.com\u003e\nUpstream-commit-id: 48eeedf1e4b\n(cherry picked from commit cd97ed407e995a8457ffd2e6947972850ca72902\n https://github.com/rhboot/grub2 fedora-31)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nConflicts:\n - util/grub-mkimagexx.c: Needed to account for new program structure in\n one xmalloc -\u003e xcalloc switch (line 1945).\n\nBUG\u003db/162782466\nTEST\u003dshielded_vm_test\n\nChange-Id: I1b060abd392bc4990a8f920327820552dbd96548\n" }, { "commit": "35be53121f0fc0026c3af309a72de8dbde2da720", "tree": "95d842eded171d86f60079e6bc81ea5f91098d4c", "parents": [ "53ffd9d9c2fa289245a297dc5418e4d354b4c137" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Mon Jun 15 12:15:29 2020 -0400" }, "committer": { "name": "Robert Kolchmeyer", "email": "rkolchmeyer@google.com", "time": "Wed Aug 05 20:06:35 2020 -0700" }, "message": "grub-lakitu: FROMGIT: calloc: Make sure we always have an overflow-checking calloc() available\n\nThis tries to make sure that everywhere in this source tree, we always have\nan appropriate version of calloc() (i.e. grub_calloc(), xcalloc(), etc.)\navailable, and that they all safely check for overflow and return NULL when\nit would occur.\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\nReviewed-by: Daniel Kiper \u003cdaniel.kiper@oracle.com\u003e\nUpstream-commit-id: 79e51ab7a9a\n(cherry picked from commit edacadd3894bf78ba4070a23812de65883207098\n https://github.com/rhboot/grub2 fedora-31)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nBUG\u003db/162782466\nTEST\u003dshielded_vm_test\n\nChange-Id: I2ec7f1431b9684765c2b31d059033eb9f0f6b415\n" }, { "commit": "53ffd9d9c2fa289245a297dc5418e4d354b4c137", "tree": "c83cc5d7828552d8c9927fbf0566ad32b9a74c00", "parents": [ "97a219dff087c4df86a41501264f3e9ca1f98dea" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Mon Jun 15 10:58:42 2020 -0400" }, "committer": { "name": "Robert Kolchmeyer", "email": "rkolchmeyer@google.com", "time": "Wed Aug 05 20:06:35 2020 -0700" }, "message": "grub-lakitu: BACKPORT: FROMGIT: safemath: Add some arithmetic primitives that check for overflow\n\nThis adds a new header, include/grub/safemath.h, that includes easy to\nuse wrappers for __builtin_{add,sub,mul}_overflow() declared like:\n\n bool OP(a, b, res)\n\nwhere OP is grub_add, grub_sub or grub_mul. OP() returns true in the\ncase where the operation would overflow and res is not modified.\nOtherwise, false is returned and the operation is executed.\n\nThese arithmetic primitives require newer compiler versions. So, bump\nthese requirements in the INSTALL file too.\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\nReviewed-by: Daniel Kiper \u003cdaniel.kiper@oracle.com\u003e\nUpstream-commit-id: de1c315841a\n(cherry picked from commit ce53098c1579f0d484f212dafbf3f81f92aca42b\n https://github.com/rhboot/grub2 fedora-31)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nConflicts:\n - include/grub/compiler.h: Removed context defining the UNUSED macro.\n Our grub does not have or use this macro (documented in\n ChangeLog-2015).\n\nBUG\u003db/162782466\nTEST\u003dshielded_vm_test\n\nChange-Id: Ib5423e137125f86c0ad542edb33e28ebb18c10b7\n" }, { "commit": "97a219dff087c4df86a41501264f3e9ca1f98dea", "tree": "dde740341c37942d657061154ad5a20a28ce47c5", "parents": [ "4ab43f1f86b7099b8ad75cf9615ea1fa155bbd7d" ], "author": { "name": "Dimitri John Ledkov", "email": "xnox@ubuntu.com", "time": "Wed Jul 22 11:31:43 2020 +0100" }, "committer": { "name": "Robert Kolchmeyer", "email": "rkolchmeyer@google.com", "time": "Wed Aug 05 20:03:54 2020 -0700" }, "message": "grub-lakitu: BACKPORT: FROMGIT: linuxefi: fail kernel validation without shim protocol.\n\nIf certificates that signed grub are installed into db, grub can be\nbooted directly. It will then boot any kernel without signature\nvalidation. The booted kernel will think it was booted in secureboot\nmode and will implement lockdown, yet it could have been tampered.\n\nThis version of the patch skips calling verification, when booted\nwithout secureboot. And is indented with gnu ident.\n\nCVE-2020-15705\n\nReported-by: Mathieu Trudel-Lapierre \u003ccyphermox@ubuntu.com\u003e\nSigned-off-by: Dimitri John Ledkov \u003cxnox@ubuntu.com\u003e\n(cherry picked from commit bb240087ce9ef9a62936fd6c1241df65a1e42d01\n https://github.com/rhboot/grub2 fedora-31)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nConflicts:\n - grub-core/loader/i386/efi/linux.c: Removed TPM measurement from patch\n context. Our grub does TPM measurements differently. I also needed to\n include an additional header in this file.\n\nBUG\u003db/162782466,b/137884271\nTEST\u003dvalidation test (cl/325153880)\n\nChange-Id: Id5a91b77b42689b4dfac7d5c4bf5b077bec9178b\n" }, { "commit": "4ab43f1f86b7099b8ad75cf9615ea1fa155bbd7d", "tree": "d93d256437bb1e308f51b89d8077d02da3f1c614", "parents": [ "bae5ccdc16ed42fac1e6596cfb199d06e4c92d3e" ], "author": { "name": "Ross Zwisler", "email": "zwisler@google.com", "time": "Wed Jan 15 16:16:04 2020 -0700" }, "committer": { "name": "Commit Bot", "email": "commit-bot@chromium.org", "time": "Thu Jan 16 15:56:12 2020 +0000" }, "message": "drop COMMIT-QUEUE.ini\n\nNothing reads this file anymore.\n\nBUG\u003dchromium:1025955\nTEST\u003dCQ passes\nExempt-From-Owner-Approval: cleanup removing unused file\n\nChange-Id: If2caef69304d2bedc3eb2b1ee0d9da71a9f86917\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/cobble/+/2003930\nTested-by: Ross Zwisler \u003czwisler@google.com\u003e\nAuto-Submit: Ross Zwisler \u003czwisler@google.com\u003e\nReviewed-by: Sean Abraham \u003cseanabraham@chromium.org\u003e\nCommit-Queue: Sean Abraham \u003cseanabraham@chromium.org\u003e\n" }, { "commit": "bae5ccdc16ed42fac1e6596cfb199d06e4c92d3e", "tree": "1bebb547a098eed950641e884fefc5fb571812a6", "parents": [ "3d2b9922e81cce898d4f09306563d3ca9d32c67e" ], "author": { "name": "Kirtika Ruchandani", "email": "kirtika@google.com", "time": "Sun Jun 09 14:35:24 2019 -0700" }, "committer": { "name": "chrome-bot", "email": "chrome-bot@chromium.org", "time": "Mon Jun 17 19:58:24 2019 -0700" }, "message": "grub-lakitu: Add OWNERS file\n\nChrome OS is moving towards enforcing OWNERS approval for changes\nto all repositories, and the first step is to ensure each repository\nhas a correct OWNERS file.\n\nBUG\u003dchromium:748644\nTEST\u003dNone\n\nChange-Id: I03b749b91274983e2ca9f9a4ad4873ecc9297701\nSigned-off-by: Kirtika Ruchandani \u003ckirtika@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/1651393\nTested-by: Kirtika Ruchandani \u003ckirtika@chromium.org\u003e\nCommit-Ready: ChromeOS CL Exonerator Bot \u003cchromiumos-cl-exonerator@appspot.gserviceaccount.com\u003e\nLegacy-Commit-Queue: Commit Bot \u003ccommit-bot@chromium.org\u003e\nReviewed-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n" }, { "commit": "3d2b9922e81cce898d4f09306563d3ca9d32c67e", "tree": "8ff5084f7945b4f0edc0cf1e61aab7a11d02dcca", "parents": [ "85e6e13ae4e3ba22f1970ebfe66610866e89132d" ], "author": { "name": "Robert Kolchmeyer", "email": "rkolchmeyer@google.com", "time": "Thu Oct 04 22:21:06 2018 -0700" }, "committer": { "name": "chrome-bot", "email": "chrome-bot@chromium.org", "time": "Fri Nov 16 05:02:21 2018 -0800" }, "message": "grub-lakitu: CHROMIUM: Make grub config read-only in secure boot\n\nTo protect the rootfs hash, we want to make grub.cfg\nread-only. We do this by storing it in a boot service\nEFI variable. When the system boots for the first\ntime, the grub configuration is loaded into the GrubConfig\nEFI variable. Subsequent boots only read the config\nfrom the GrubConfig EFI variable.\n\nChanges are made to the \u0027normal\u0027 command. The normal command is\nexecuted when grub first starts and is the command that loads and\nexecutes grub.cfg. We change the normal command to load the grub\nconfiguration in a different way when secure boot is enabled.\n\nI tried to follow the gnu C style guide to be consistent with\nthe rest of grub.\n\nCQ-DEPEND\u003dCL:1272375\nBUG\u003db:112317631\nTEST\u003dSign with dev keys; boot with EFI; change kernel cmdline in grub.cfg; reboot; /proc/cmdline hasn\u0027t changed\nRELEASE_NOTE\u003dNone\n\nChange-Id: I1adfcfe6f6ccf14e4eebe7f5be0835d0cd643437\nReviewed-on: https://chromium-review.googlesource.com/1265958\nCommit-Ready: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nTested-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nReviewed-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n" }, { "commit": "85e6e13ae4e3ba22f1970ebfe66610866e89132d", "tree": "be33986c0f5e135864005b68d164b9719eea56ab", "parents": [ "6c3c532096960f3a5a1e4d687881a389e58a101a" ], "author": { "name": "Edward Hyunkoo Jee", "email": "edjee@google.com", "time": "Tue Feb 27 19:44:28 2018 -0800" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:27:04 2018 +0000" }, "message": "grub-lakitu: CHROMIUM: hook \"linux\" command\n\nThe grub.cfg template of Chrome OS uses \"linux\" command. In order to\nuse that as is, and also in order to prevent the bootloader from\nloading unsigned linux kernels, we change \"linux\" command to\n\"linuxefi\" command.\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I57e952b96b2a45c554597920a6bf7da50cc98ad6\nReviewed-on: https://chromium-review.googlesource.com/945905\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "6c3c532096960f3a5a1e4d687881a389e58a101a", "tree": "cb0a1904d180baf08e80b486dc7d6df63fe9a99b", "parents": [ "6b94362fa35afb714330829f60967cb16f77367d" ], "author": { "name": "Matthew Garrett", "email": "matthewgarrett@google.com", "time": "Wed Jul 05 14:19:57 2017 -0700" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:26:57 2018 +0000" }, "message": "grub-lakitu: FROMLIST: Core TPM support\n\nAdd support for performing basic TPM measurements. Right now this only\nsupports extending PCRs statically and only on UEFI.\n\n(am from http://lists.gnu.org/archive/html/grub-devel/2017-07/msg00005.html)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I68bacc099084b8dadbd6ed9fad92b3585d14db6e\nReviewed-on: https://chromium-review.googlesource.com/945904\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "6b94362fa35afb714330829f60967cb16f77367d", "tree": "e63f389bd000029286dc2e2e09811f9bcc102c85", "parents": [ "681ee6bed23e18f5cc7c4a597d5a9949950db0b6" ], "author": { "name": "Matthew Garrett", "email": "matthewgarrett@google.com", "time": "Wed Jul 05 14:19:56 2017 -0700" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:26:50 2018 +0000" }, "message": "grub-lakitu: FROMLIST: Verify commands executed by grub\n\nPass commands to the verification code. We want to be able to log these\nin the TPM verification case.\n\n(am from http://lists.gnu.org/archive/html/grub-devel/2017-07/msg00004.html)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I1efdb2b110b070408e4562b38c49456d8ff0e5ad\nReviewed-on: https://chromium-review.googlesource.com/945903\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "681ee6bed23e18f5cc7c4a597d5a9949950db0b6", "tree": "ac3cd425962ea519b78f958b0ba9b9485f6f6008", "parents": [ "f3dea062b9ad4aa9b66756310c35a8b45b9c1394" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Wed May 24 15:58:18 2017 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:26:44 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Clean up some errors in the linuxefi loader\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit 317453f2b2e610bd4a554de7a90bf1179a5ecc78)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I16f7da1a67e5338c2c337971716746c4d212f73b\nReviewed-on: https://chromium-review.googlesource.com/945902\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "f3dea062b9ad4aa9b66756310c35a8b45b9c1394", "tree": "ca944c2e2f20ae7328dd44044a1c1331873bfb72", "parents": [ "34d8f7388a8cb99991420e54f06b23832da81746" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Tue Feb 14 16:18:54 2017 -0500" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:26:37 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Handle multi-arch (64-on-32) boot in linuxefi loader.\n\nAllow booting 64-bit kernels on 32-bit EFI on x86.\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit 13b230f5f3ba370836cddfc9461addbf18f41db1)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Ic56a74e2d144800e04f59825bc8d084115ebaf59\nReviewed-on: https://chromium-review.googlesource.com/945901\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "34d8f7388a8cb99991420e54f06b23832da81746", "tree": "c792a4ba009162feb48b36308898cec4bcdada1c", "parents": [ "1e87dc5fea598e5c05462be4579b79d07e219927" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Tue Feb 14 16:31:52 2017 -0500" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:26:30 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: linuxefi: minor cleanups\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit 07746095f9dc71a606e736b2e3ef07b960b275c0)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I5df554462c1c367d249d92f8c756b3a21f277302\nReviewed-on: https://chromium-review.googlesource.com/945900\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "1e87dc5fea598e5c05462be4579b79d07e219927", "tree": "89a52b40e12d7ca7c214cd16a71ef1bff767d5b8", "parents": [ "2d9a558012277f06219f5b49bce8e68aa71bcbb8" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Mon May 09 14:15:17 2016 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:26:21 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Add some grub_dprintf() in the linuxefi path.\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit 61566a5077f9384644840cad959081d31b73dbf5)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Id594da1c15d456d0ead5ddcf181269c459057963\nReviewed-on: https://chromium-review.googlesource.com/945899\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "2d9a558012277f06219f5b49bce8e68aa71bcbb8", "tree": "379cc6910bc00fcad26db134276520cc66a1de87", "parents": [ "bd325b98dd1c3f994b6663ed974b35f2206a5c7d" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Fri Jun 10 14:06:15 2016 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:26:14 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Rework even more of efi chainload so non-sb cases work right.\n\nThis ensures that if shim protocol is not loaded, or is loaded but shim\nis disabled, we will fall back to a correct load method for the efi\nchain loader.\n\nHere\u0027s what I tested with this version:\n\nresults expected actual\n------------------------------------------------------------\nsb + enabled + shim + fedora success success\nsb + enabled + shim + win success success\nsb + enabled + grub + fedora fail fail\nsb + enabled + grub + win fail fail\n\nsb + mokdisabled + shim + fedora success success\nsb + mokdisabled + shim + win success success\nsb + mokdisabled + grub + fedora fail fail\nsb + mokdisabled + grub + win fail fail\n\nsb disabled + shim + fedora success success*\nsb disabled + shim + win success success*\nsb disabled + grub + fedora success success\nsb disabled + grub + win success success\n\nnosb + shim + fedora success success*\nnosb + shim + win success success*\nnosb + grub + fedora success success\nnosb + grub + win success success\n\n* for some reason shim protocol is being installed in these cases, and I\n can\u0027t see why, but I think it may be this firmware build returning an\n erroneous value. But this effectively falls back to the mokdisabled\n behavior, which works correctly, and the presence of the \"grub\" (i.e.\n no shim) tests effectively tests the desired behavior here.\n\nResolves: rhbz#1344512\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n\n(cherry picked from commit d92273bddee4025aaa54acf51dea6782b49b97db)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Ie62db1625d57ca6f27e94c841d611da9ff1207c9\nReviewed-on: https://chromium-review.googlesource.com/945898\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "bd325b98dd1c3f994b6663ed974b35f2206a5c7d", "tree": "813b1158d3511ef6bbb10201c8f71d263ed70162", "parents": [ "93c65e2e79856718da79eb6a6fe95f692fe19a8b" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Thu Jun 09 12:22:29 2016 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:26:07 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Re-work some intricacies of PE loading.\n\nThe PE spec is not a well written document, and awesomely every place\nwhere there\u0027s an ambiguous way to read something, Windows\u0027 bootmgfw.efi\ntakes a different read than either of them.\n\n(cherry picked from commit ae960ea29fe03a6b38ffa9626c55c0c68bb10c76)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I43e0a638bb1b8481fa2ccc1ad35ec2c7981c45e2\nReviewed-on: https://chromium-review.googlesource.com/945897\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "93c65e2e79856718da79eb6a6fe95f692fe19a8b", "tree": "c6688dc4725904f94dae3274d2b35d35b83b95e0", "parents": [ "30a49d0373138996adcd90f80a5adfba9a342c6d" ], "author": { "name": "Matthew Garrett", "email": "mjg59@coreos.com", "time": "Sun Aug 09 16:20:58 2015 -0700" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:25:59 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Rework linux16 command\n\nWe want a single buffer that contains the entire kernel image in order to\nperform a TPM measurement. Allocate one and copy the entire kernel int it\nbefore pulling out the individual blocks later on.\n\n(cherry picked from commit 050368d2a8623532cad8c05a6238a73923e24d70)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I897cc57765516ddde689cd2cb7bc2b9a39870c69\nReviewed-on: https://chromium-review.googlesource.com/945896\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "30a49d0373138996adcd90f80a5adfba9a342c6d", "tree": "69598b9e4b43ded8881376a1570121fc16711cd1", "parents": [ "dd74eae0e18a168c403c3f1a7db8c23956690792" ], "author": { "name": "Matthew Garrett", "email": "mjg59@coreos.com", "time": "Sun Aug 09 16:12:39 2015 -0700" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:25:51 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Rework linux command\n\nWe want a single buffer that contains the entire kernel image in order to\nperform a TPM measurement. Allocate one and copy the entire kernel into it\nbefore pulling out the individual blocks later on.\n\n(cherry picked from commit d173b6cae51563660470af511c48cb543b31dba2)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I40681368f9c92dafbb216b7aa363a24e91578235\nReviewed-on: https://chromium-review.googlesource.com/945895\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "dd74eae0e18a168c403c3f1a7db8c23956690792", "tree": "5bc58d830873a646ea67b70b5ff03a85f4037c5b", "parents": [ "b92669e715ba7c6fe82f6fca8a988f61db79ff9d" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Tue Oct 06 16:09:25 2015 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:25:41 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Make any of the loaders that link in efi mode honor secure boot.\n\nAnd in this case \"honor\" means \"even if somebody does link this in, they\nwon\u0027t register commands if SB is enabled.\"\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit babb9e25977ac0d8353493182cbef1ca4cf74a50)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I0971dbb2cacb0e1aef95fd67a9cdf6f493d0520a\nReviewed-on: https://chromium-review.googlesource.com/945894\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "b92669e715ba7c6fe82f6fca8a988f61db79ff9d", "tree": "35814afcb58922a89a87dbc086831f40ca88c223", "parents": [ "e9c9ad38970bd5b9c9a85bf8faca3dfed0a16e3c" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Tue Oct 06 13:04:37 2015 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:25:34 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Add secureboot support on efi chainloader\n\nExpand the chainloader to be able to verify the image by means of shim\nlock protocol. The PE/COFF image is loaded and relocated by the\nchainloader instead of calling LoadImage and StartImage UEFI boot\nService as they require positive verification result from keys enrolled\nin KEK or DB. The shim will use MOK in addition to firmware enrolled\nkeys to verify the image.\n\nThe chainloader module could be used to load other UEFI bootloaders,\nsuch as xen.efi, and could be signed by any of MOK, KEK or DB.\n\nBased on https://build.opensuse.org/package/view_file/openSUSE:Factory/grub2/grub2-secureboot-chainloader.patch\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit 5404b3eb5eb6a42e8027fa98ea232a5777559137)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Ia36ae78f6e6b1da6c98e3efc73db5669b48f857e\nReviewed-on: https://chromium-review.googlesource.com/945893\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "e9c9ad38970bd5b9c9a85bf8faca3dfed0a16e3c", "tree": "c9285c18677bc497c2069654f816dd6d9b2dfcff", "parents": [ "fe30eed1baf8b1bdb87adc61c8013b48e25da938" ], "author": { "name": "Raymund Will", "email": "rw@suse.com", "time": "Fri Apr 10 01:45:02 2015 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:25:25 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Use device part of chainloader target, if present.\n\nOtherwise chainloading is restricted to \u0027$root\u0027, which might not even\nbe readable by EFI!\n\nv1. use grub_file_get_device_name() to get device name\n\nSigned-off-by: Michael Chang \u003cmchang@suse.com\u003e\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit d150a93f581e2ea990982fe810a4a777880ad9fa)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I161c5aa570236011a6d08a1f4e7251feb4c9ed22\nReviewed-on: https://chromium-review.googlesource.com/945892\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "fe30eed1baf8b1bdb87adc61c8013b48e25da938", "tree": "6e4387b7b69ff10cf824d9fba5260985426a9917", "parents": [ "78dd5816fe4d89eadeeaa28e3cea725dec109606" ], "author": { "name": "Matthew Garrett", "email": "mjg59@coreos.com", "time": "Tue Jul 14 16:58:51 2015 -0700" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:25:18 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Fix race in EFI validation\n\n(cherry picked from commit 81a5065ad76bbd66cdbbf565e0676d8ecc6dd8fa)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I0498e2cc45e5ba4c835f5cff225362abb2f49276\nReviewed-on: https://chromium-review.googlesource.com/945891\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "78dd5816fe4d89eadeeaa28e3cea725dec109606", "tree": "09638e9bd0f21a50671119f58cd840053cd2c608", "parents": [ "8c08c16dcc1094dbfa69cb6275d5ab7558460d1d" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Tue Jan 14 13:12:23 2014 -0500" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:25:07 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTERS-SB: Make 10_linux work with our changes for linux16 and linuxefi on aarch64\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit b47a07542635a20df289f326d040e3607dc2297a)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I348b001596c92b10506327e105e287a15e6ced31\nReviewed-on: https://chromium-review.googlesource.com/945890\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "8c08c16dcc1094dbfa69cb6275d5ab7558460d1d", "tree": "6aff03ae3dc6efc257ca03772e0c3040130a0f8d", "parents": [ "faa683d67e7d4f0b2e11768f3de96875d05f1f0a" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Mon Oct 28 10:05:07 2013 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:25:00 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Use linux16 when appropriate (#880840)\n\nThe kernel group really would prefer that we use the 16 bit entry point\non x86 bios machines.\n\nResolves: rhbz#880840\n\nSigned-off-by: Peter Jones \u003cpjones@redhat.com\u003e\n(cherry picked from commit 20112dd8e1bca82c83cd795ea84154a008e6d585)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Id1ba1790396328318e74d5fdd85974e1e810291e\nReviewed-on: https://chromium-review.googlesource.com/945889\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "faa683d67e7d4f0b2e11768f3de96875d05f1f0a", "tree": "7eb71291d3899537f2335da074a16296d5c913ca", "parents": [ "16d07cc1cb4d09e16d0134c6634d0b4bf1ce9779" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Thu Sep 18 11:26:14 2014 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:24:52 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Load arm with SB enabled.\n\nMake sure we actually try to validate secure boot on this platform (even\nthough we\u0027re not shipping it enabled by default.)\n\nThis means giving the kernel grub\u0027s loaded image as the vehicle for the\nkernel command line, because we can\u0027t call systab-\u003ebs-\u003eLoadImage() if SB\nis enabled.\n\n(cherry picked from commit 43ac72cf589721a8e3e5f0c36a6419232b089dea)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I7261ebba910d1450df4e9dc6b0af58e89eeb2b39\nReviewed-on: https://chromium-review.googlesource.com/945888\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "16d07cc1cb4d09e16d0134c6634d0b4bf1ce9779", "tree": "4ef195d6d8ed789fc413003a450607c346cc3e84", "parents": [ "78d109819d4e8bd125acdd048ef95875fd399769" ], "author": { "name": "Colin Watson", "email": "cjwatson@ubuntu.com", "time": "Tue Oct 23 10:40:49 2012 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:24:45 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Don\u0027t allow insmod when secure boot is enabled.\n\nHi,\n\nFedora\u0027s patch to forbid insmod in UEFI Secure Boot environments is fine\nas far as it goes. However, the insmod command is not the only way that\nmodules can be loaded. In particular, the \u0027normal\u0027 command, which\nimplements the usual GRUB menu and the fully-featured command prompt,\nwill implicitly load commands not currently loaded into memory. This\npermits trivial Secure Boot violations by writing commands implementing\nwhatever you want to do and pointing $prefix at the malicious code.\n\nI\u0027m currently test-building this patch (replacing your current\ngrub-2.00-no-insmod-on-sb.patch), but this should be more correct. It\nmoves the check into grub_dl_load_file.\n\n(cherry picked from commit 6f8175a2bd6b7f1a0fd560cc0f93325d500f4d94)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Iec511340c8a06f5ab110642cd5790f8a8b938da8\nReviewed-on: https://chromium-review.googlesource.com/945887\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "78d109819d4e8bd125acdd048ef95875fd399769", "tree": "e7c4a4a7d6f4329842f303bc3b23af96d144e0b0", "parents": [ "d7d2451ceb9ad08ad91f22da649dc0e775cc3313" ], "author": { "name": "Peter Jones", "email": "pjones@redhat.com", "time": "Mon Jul 16 18:57:11 2012 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:24:37 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Use \"linuxefi\" and \"initrdefi\" where appropriate.\n\n(cherry picked from commit ecd6ad1851e916227584440987326647e74d5b98)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Ib77027035d3ca026326fdf9b4b46f009a3b4607a\nReviewed-on: https://chromium-review.googlesource.com/945886\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "d7d2451ceb9ad08ad91f22da649dc0e775cc3313", "tree": "c281672e5bd2f39ca60debaae9b0e7a749c5b348", "parents": [ "aae64b719211650d2e78b3ca2a093e7be479cb24" ], "author": { "name": "Edward Hyunkoo Jee", "email": "edjee@google.com", "time": "Tue Feb 13 15:53:05 2018 -0800" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:24:29 2018 +0000" }, "message": "grub-lakitu: CHROMIUM: fix build\n\nFix compile errors caused by the conflicts between Redhat\u0027s UEFI\nsecure boot patches and Grub2 upstream\u0027s \u0027phcoder/verifiers\u0027 branch.\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I9253e52fed5c6a13895b63de3c659f27bd76df7a\nReviewed-on: https://chromium-review.googlesource.com/945885\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "aae64b719211650d2e78b3ca2a093e7be479cb24", "tree": "6351dca22504e7cf4714a026575cc46331315a56", "parents": [ "aabcb341e8d2805a15a7ec9016f9254a80b096bd" ], "author": { "name": "Matthew Garrett", "email": "mjg@redhat.com", "time": "Tue Jul 10 11:58:52 2012 -0400" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:24:22 2018 +0000" }, "message": "grub-lakitu: REDHAT: MASTER-SB: Add support for linuxefi\n\n(cherry picked from commit af0725c020b5a7d21c71998c52e8111cc86728c6)\n(from master-sb branch of https://github.com/rhboot/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: If0e5fbd9753c48acad56c69775c9700be524d592\nReviewed-on: https://chromium-review.googlesource.com/945884\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "aabcb341e8d2805a15a7ec9016f9254a80b096bd", "tree": "52efcb4801923c1a8188d2d8a3b9c76269a82d9c", "parents": [ "7f17d439cfac4f059fbb8418565b3e42ff60f126" ], "author": { "name": "Josh Triplett", "email": "josh@joshtriplett.org", "time": "Wed Jul 31 14:03:00 2013 -0700" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:24:14 2018 +0000" }, "message": "grub-lakitu: CHROMIUM: Forward-port gptpriority command to GRUB 2.00\n\nForward-ported from git commit 9866f9750a38a175849ca04439922ac1ffe8a0e7\nwith significant edits: Ported from the previous Ruby-based build system\nto the new autogen-based Makefile.am generator, and updated for GRUB API\nchanges. In particular, the previous version of gptpriority counted on\nGRUB\u0027s part_gpt to provide access to the original partition table data\nin a field of \"struct grub_partition\" that no longer exists; this\nupdated version modifies part_gpt to directly export the relevant\nattribute field as a new field in grub_partition.\n\nSince this adds a new source file and a new module, and the GRUB ebuild\nexpects source in \"make dist\" form (with configure and Makefile.in\nalready generated), this commit also updates the corresponding generated\nfiles via autogen.sh.\n\nBUG\u003dchromium:265918\nTEST\u003dWith the complete patch series, built a complete x86-generic image,\n and booted it via UEFI on both 32-bit and 64-bit UEFI platforms.\n\nCQ-DEPEND\u003dIe865f3d5ab0ecd8e9138bfd5b576a8147a205757\n\nReviewed-on: https://gerrit.chromium.org/gerrit/63986\nTested-by: Josh Triplett \u003cjosh@joshtriplett.org\u003e\nReviewed-by: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\nCommit-Queue: Josh Triplett \u003cjosh@joshtriplett.org\u003e\n\n(cherry picked from commit 612090b4d856bda80d5879aa244069fe622d5c56)\n(from https://chromium.googlesource.com/chromiumos/third_party/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I51afa58f77411eb7b699f1315cdce261eba7586c\nReviewed-on: https://chromium-review.googlesource.com/945883\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "7f17d439cfac4f059fbb8418565b3e42ff60f126", "tree": "9555ba4b69213b36def7213fd63d4f7299541926", "parents": [ "6218196467785f355e4e49b3b68e87682362a03e" ], "author": { "name": "Josh Triplett", "email": "josh@joshtriplett.org", "time": "Wed Jul 31 13:54:36 2013 -0700" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:24:04 2018 +0000" }, "message": "grub-lakitu: CHROMIUM: Forward-port ChromeOS-specific GRUB environment variables for boot disk and partitions\n\nThis commit forward-ports the following changes previously applied in the\nChromeOS version of GRUB, with updates for changes to the surrounding code and\nGRUB API changes:\n\n144e40aca61589db1d286c82508f9328ec861158 Add variables to grub2 for Chrome OS bringup workarounds.\nas modified by e63c2ee074c3c0abb5717fc8b7df62cf32066782 Support standard EFI ordering\nand 5dfc8e1ae8c7d6836f2faef2545e4c5e6d516dff Add variable \u0027grubdisk\u0027 to export boot disk\n\nIn particular, grub2 now has a grub_snprintf, and no longer has a grub_sprintf.\n\nBUG\u003dchromium:265918\nTEST\u003dWith the complete patch series, built a complete x86-generic image,\n and booted it via UEFI on both 32-bit and 64-bit UEFI platforms.\n\nCQ-DEPEND\u003dI8d4cdde878efe73e15fddb250b10cfd4b88d88d1\n\nReviewed-on: https://gerrit.chromium.org/gerrit/63985\nTested-by: Josh Triplett \u003cjosh@joshtriplett.org\u003e\nReviewed-by: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\nCommit-Queue: Josh Triplett \u003cjosh@joshtriplett.org\u003e\n\n(cherry picked from commit 0b2d29898512e97045bec6103efd283762b8a241)\n(from https://chromium.googlesource.com/chromiumos/third_party/grub2)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I9793e93409f6405b0df779c9937988c6213962bc\nReviewed-on: https://chromium-review.googlesource.com/945882\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "6218196467785f355e4e49b3b68e87682362a03e", "tree": "3652dc90f3f895dc08f2b2def35043a02a6a1827", "parents": [ "124503b5032382512603efa0e31ec84e055046c0" ], "author": { "name": "Vladimir Serbinenko", "email": "phcoder@gmail.com", "time": "Tue May 09 16:39:38 2017 +0200" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:23:54 2018 +0000" }, "message": "grub-lakitu: UPSTREAM: VERIFIERS: Add verifiers documentation\n\n(cherry picked from commit 2cdd6159d7fc7157f56b1748ae383e95156adc7a)\n(from phcoder/verifiers branch of git://git.savannah.gnu.org/grub.git)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I769da862b875ea07a657bcfb7ca0597ef5ffdfb4\nReviewed-on: https://chromium-review.googlesource.com/945881\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "124503b5032382512603efa0e31ec84e055046c0", "tree": "4635c5d977f0da7567f219794c5223d5c65171f7", "parents": [ "747a5bb691899d1308e4833be0f1f4570179d4f0" ], "author": { "name": "Vladimir Serbinenko", "email": "phcoder@gmail.com", "time": "Tue Feb 07 02:10:14 2017 +0100" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:23:44 2018 +0000" }, "message": "grub-lakitu: UPSTREAM: VERIFIERS: Add possibility to verify kernel command lines.\n\n(cherry picked from commit ba5401b19782fb25aa47e388452c39936672a796)\n(from phcoder/verifiers branch of git://git.savannah.gnu.org/grub.git)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I52ea7cc053d9ac4d1b6af09517888e3bdab27de0\nReviewed-on: https://chromium-review.googlesource.com/945880\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "747a5bb691899d1308e4833be0f1f4570179d4f0", "tree": "cf675887d1c281df5a665b957f5577b9d3df9895", "parents": [ "1d81c3c583584f991a7f011f5e8f4c29261b39ca" ], "author": { "name": "Vladimir Serbinenko", "email": "phcoder@gmail.com", "time": "Mon Feb 06 17:12:09 2017 +0100" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:23:35 2018 +0000" }, "message": "grub-lakitu: UPSTREAM: VERIFIERS: Adjustment proposed by dkiper\n\n(cherry picked from commit 4f280d955e922e889bce2bd80347c1c0cd4daed9)\n(from phcoder/verifiers branch of git://git.savannah.gnu.org/grub.git)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Icb9dcd292e3a3b013daf0411e5a3ff7eb13d71ee\nReviewed-on: https://chromium-review.googlesource.com/945879\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "1d81c3c583584f991a7f011f5e8f4c29261b39ca", "tree": "237fd0ab2367bbcf80da71618adc9caea6ee170c", "parents": [ "753f677200b9a0fc32bc8d26cd4f8f3a516e65c1" ], "author": { "name": "Vladimir Serbinenko", "email": "phcoder@gmail.com", "time": "Sun Feb 05 14:25:47 2017 +0100" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:23:28 2018 +0000" }, "message": "grub-lakitu: UPSTREAM: VERIFIERS: verify framework.\n\n(cherry picked from commit 09bd17faaabcfc61ec0509ede7e0ad2c6c0e0ba5)\n(from phcoder/verifiers branch of git://git.savannah.gnu.org/grub.git)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Ie0e15d42f416f1e70feb6f43ecd5a574cbeb1751\nReviewed-on: https://chromium-review.googlesource.com/945878\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "753f677200b9a0fc32bc8d26cd4f8f3a516e65c1", "tree": "5866443d7cd61d31b108cbe5af883939afcc17c2", "parents": [ "761c4cc9368fd54464b1f8f531a88567c561b878" ], "author": { "name": "Vladimir Serbinenko", "email": "phcoder@gmail.com", "time": "Wed Nov 20 02:28:29 2013 +0100" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:23:19 2018 +0000" }, "message": "grub-lakitu: UPSTREAM: VERIFIERS: File type for fine-grained signature-verification controlling\n\n(cherry picked from commit aa93127ed89f39d31979b60c1b6f567351c5f879)\n(from phcoder/verifiers branch of git://git.savannah.gnu.org/grub.git)\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: I88d62b4e9f68f7ff2046f5ebebf258fe4ae99e0a\nReviewed-on: https://chromium-review.googlesource.com/945877\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "761c4cc9368fd54464b1f8f531a88567c561b878", "tree": "c275d4f9d68d267948fcdd128aaa0177aadd9833", "parents": [ "834f1843f81171fd016597e3c001c1bebe384ac2" ], "author": { "name": "Edward Hyunkoo Jee", "email": "edjee@google.com", "time": "Fri Mar 02 03:36:47 2018 -0500" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:22:58 2018 +0000" }, "message": "add README and commit queue settings\n\nBUG\u003db:69569602\nTEST\u003dNone\n\nChange-Id: I46e1660d6dadbde24bd3614cc94337d0aa48ac94\nReviewed-on: https://chromium-review.googlesource.com/945875\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "834f1843f81171fd016597e3c001c1bebe384ac2", "tree": "cc4b6b5cdbee33ad54cbbb5900104e323729e16d", "parents": [ "b824f623ead78dc7e047e2abf2b3fd285046ee68" ], "author": { "name": "Edward Hyunkoo Jee", "email": "edjee@google.com", "time": "Thu Mar 01 22:38:13 2018 -0500" }, "committer": { "name": "Edward Jee", "email": "edjee@google.com", "time": "Wed Mar 07 22:22:42 2018 +0000" }, "message": "grub-lakitu: import upstream GNU GRUB 2.03\n\nWe will use Red Hat Shim and Grub 2 for UEFI firmware, until we\nimplement a new bootloader.\n\nThis change imports the snapshot of commit\nf8679cedff703b437171f4708d46adbfcff80a65\n(\"sparc64: Don\u0027t use devspec to determine the OBP path\")\nof upstream GNU GRUB 2.03 (git://git.savannah.gnu.org/grub.git ),\ninto directory \"grub-lakitu\".\n\nCopied the upstream files as they are, without making any change.\n\nBUG\u003db:69569602\nTEST\u003dTBD\n\nChange-Id: Ib184acfce250cfde26a8bd154361932e6a29dc1d\nReviewed-on: https://chromium-review.googlesource.com/945876\nReviewed-by: Edward Jee \u003cedjee@google.com\u003e\nCommit-Queue: Edward Jee \u003cedjee@google.com\u003e\nTested-by: Edward Jee \u003cedjee@google.com\u003e\nTrybot-Ready: Edward Jee \u003cedjee@google.com\u003e\n" }, { "commit": "b824f623ead78dc7e047e2abf2b3fd285046ee68", "tree": "4b825dc642cb6eb9a060e54bf8d69288fbee4904", "parents": [], "author": { "name": "Prathmesh Prabhu", "email": "pprabhu@chromium.org", "time": "Thu Mar 01 23:55:38 2018 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "noreply-gerritcodereview@google.com", "time": "Thu Mar 01 23:55:38 2018 +0000" }, "message": "Initial empty repository\n" } ] }