diff options
author | Simon J. Gerraty <sjg@FreeBSD.org> | 2019-05-24 19:43:38 +0000 |
---|---|---|
committer | Simon J. Gerraty <sjg@FreeBSD.org> | 2019-05-24 19:43:38 +0000 |
commit | 2ef9ff7dd34a78a7890ba4d6de64da34d9c10942 (patch) | |
tree | 9dc8b4c17977e67521b428c7637a5cd0b90c5915 /stand/ficl.mk | |
parent | d3f78f00db6c2c13b49ca66d73f522bb851823e8 (diff) | |
download | src-test2-2ef9ff7dd34a78a7890ba4d6de64da34d9c10942.tar.gz src-test2-2ef9ff7dd34a78a7890ba4d6de64da34d9c10942.zip |
ficl pfopen: verify file
If the file is verified - do not allow write
otherwise do not allow read.
Add O_ACCMODE to stand.h
Reviewed by: stevek, mindal_semihalf.com
MFC after: 3 days
Sponsored by: Juniper Networks
Differential Revision: https://reviews.freebsd.org/D20387
Notes
Notes:
svn path=/head/; revision=348249
Diffstat (limited to 'stand/ficl.mk')
-rw-r--r-- | stand/ficl.mk | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/stand/ficl.mk b/stand/ficl.mk index 67c06fa1cbf4..0f96532cc65b 100644 --- a/stand/ficl.mk +++ b/stand/ficl.mk @@ -16,3 +16,7 @@ CFLAGS+= -fPIC CFLAGS+= -I${FICLSRC} -I${FICLSRC}/${FICL_CPUARCH} -I${LDRSRC} CFLAGS+= -DBF_DICTSIZE=15000 + +.if ${MK_LOADER_VERIEXEC} != "no" +CFLAGS+= -DLOADER_VERIEXEC -I${SRCTOP}/lib/libsecureboot/h +.endif |