[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH v8 0/4] Various patches to improve Secure Boot support
- To: xen-devel@xxxxxxxxxxxxxxxxxxxx
- From: Frediano Ziglio <freddy77@xxxxxxxxx>
- Date: Wed, 19 Aug 2026 11:03:44 +0100
- Arc-authentication-results: i=1; mx.google.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=mDNLO0xc31qLwjng0ficJHE9ArvswGdZXzGZB5MG/YE=; fh=gKNe9p6CUigmZ3hfEbBZPSHY3Mosr9iEmW1Mh4pK8Uo=; b=iygMP8N9lL1QdCDELGpZkv50PsJ0je6oQa+CiVfIVGKayxArKNyi9DrF78DQYB7p1z 7t934CErtSHBq6GuC+JVXvJZ4cH4KyBDctzxgIy8vYxthY8Ui+cBmQQPIEOmKgyrF1+C /zrwSyJ5YFN2lqG0xNtOB8eUGZYT8dlLVsbL7FpVN33OyBCIc+kxmyeD/NpXoXujfkN6 2JEQpiJT3mxgDk+h9MpOwo31bjicUkXDq/Dg8ipEAn8dKs38D7K2XVXLU/7/zBnRS2Dm UGY+iAE1uvtrM3Mmgl6vzSSO1jf9BS4k2eR7WxHiYJr2Hf/ljJSRNIEge/E8+GQEyc9U rixQ==; darn=lists.xenproject.org
- Arc-seal: i=1; a=rsa-sha256; t=1787133836; cv=none; d=google.com; s=arc-20260327; b=abNGgkbtv8xeHMeOjsEc6CVolrj3vz/k6gIvmhdYj1PqcjP/Vns5fRTpppkyuqgWu8 dbiKWkXxk0HGpM/50z70RRvf4VDBaZLhm90NYaZpfAWTxIg6EqdxY9TKyajUPlTz3u2J lSyzNJrk7NaSuDKoDT70Xe1lwuM/kZ+qN92URX6YwrJvkFod7LOdQa3SnHhZ2sEYLtw9 rUXwPyDXUyfBixjr9cM9Qt1YS+d1PDrzuh6IwuzSaM4snZe9A6d0fsTs4TO7d1F3mK2g 0JkbpB2ea9wuPCzsq8SMhtdUp0HjOFo7Wqg5/KGnTxGczlPtDquUOVtyPTceIyNP1cs8 xv5w==
- Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=20251104 header.d=gmail.com header.i="@gmail.com" header.h="Content-Transfer-Encoding:Content-Type:Cc:To:Subject:Message-ID:Date:From:In-Reply-To:References:MIME-Version"
- Cc: Frediano Ziglio <frediano.ziglio@xxxxxxxxxx>, Jan Beulich <jbeulich@xxxxxxxx>, Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Roger Pau Monné <roger.pau@xxxxxxxxxx>, Teddy Astie <teddy.astie@xxxxxxxxxx>, Anthony PERARD <anthony.perard@xxxxxxxxxx>, Michal Orzel <michal.orzel@xxxxxxx>, Julien Grall <julien@xxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>, "Daniel P. Smith" <dpsmith@xxxxxxxxxxxxxxxxxxxx>, Marek Marczykowski-Górecki <marmarek@xxxxxxxxxxxxxxxxxxxxxx>
- Delivery-date: Wed, 19 Aug 2026 10:04:03 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
On Sat, 8 Aug 2026 at 07:41, Frediano Ziglio <freddy77@xxxxxxxxx> wrote:
>
> On Wed, 15 Jul 2026 at 07:22, Frediano Ziglio <freddy77@xxxxxxxxx> wrote:
> >
> > These patches improve support for Secure boot.
> > UEFI CA memory mitigation requires memory pages to be not executable and
> > writable at the same time. So changing permissions and splitting some
> > section
> > is required.
> > Remove multiboot pieces from EFI executable.
> >
> > Changes since v1:
> > - improved some comments;
> > - merged 2 pacthes removing multiboot support in x86 PE;
> > - removed a patch dealing with SBAT;
> > - other minor changes (see single patches).
> >
> > Changes since v2:
> > - improved some comments.
> >
> > Changes since v3:
> > - Added Acked-by;
> > - Improve commit message.
> >
> > Changes since v4:
> > - Messages updates;
> > - Clean some dependencies cause by code removal;
> > - Add small commit to remove a possibly unused string.
> >
> > Changes since v5:
> > - removed merged commit;
> > - remove more code/data from xen.efi output.
> >
> > Changes since v6:
> > - fix commit message.
> >
> > Changes since v7:
> > - added Acked-by, all commit are now acked.
> >
> > Frediano Ziglio (2):
> > Align relevant sections to 4KB
> > x86: Split .init section to satisfy UEFI CA memory mitigation
> >
> > Roger Pau Monné (2):
> > x86/efi: discard multiboot and PVH support for PE binary
> > x86/efi: avoid a relocation in efi_arch_post_exit_boot()
> >
> > docs/hypervisor-guide/x86/how-xen-boots.rst | 6 -----
> > xen/arch/x86/boot/head.S | 8 +++----
> > xen/arch/x86/efi/efi-boot.h | 7 ++++--
> > xen/arch/x86/xen.lds.S | 25 ++++++++++++---------
> > xen/tools/combine_two_binaries.py | 2 +-
> > 5 files changed, 25 insertions(+), 23 deletions(-)
> >
>
> Ping
>
Ping
Frediano
|
