diff options
| author | Michael Brown | 2017-09-18 14:32:39 +0200 |
|---|---|---|
| committer | Michael Brown | 2017-09-18 15:38:12 +0200 |
| commit | 7428ab7258e03ddef79ba774432b7b8c11cc2730 (patch) | |
| tree | be87ba6f133384c149b9976718d3694ad047d10b /src/interface | |
| parent | [efi] Continue to connect remaining handles after connection errors (diff) | |
| download | ipxe-7428ab7258e03ddef79ba774432b7b8c11cc2730.tar.gz ipxe-7428ab7258e03ddef79ba774432b7b8c11cc2730.tar.xz ipxe-7428ab7258e03ddef79ba774432b7b8c11cc2730.zip | |
[build] Exclude selected directories from Secure Boot builds
When submitting binaries for UEFI Secure Boot signing, certain
known-dubious subsystems (such as 802.11 and NFS) must be excluded
from the build. Mark the directories containing these subsystems as
insecure, and allow the build target to include an explicit "security
flag" (a literal "-sb" appended to the build platform) to exclude
these source directories from the build process.
For example:
make bin-x86_64-efi-sb/ipxe.efi
will build iPXE with all code from the 802.11 and NFS subsystems
excluded from the build.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/interface')
0 files changed, 0 insertions, 0 deletions