summaryrefslogtreecommitdiffstats
path: root/src/usr
diff options
context:
space:
mode:
authorMichael Brown2012-03-22 14:39:45 +0100
committerMichael Brown2012-03-22 17:16:02 +0100
commit97dcc824bf298788e37f6869417662b0b9d16102 (patch)
tree60d81bbd91a751e02c6b139887eae33dafe33a7c /src/usr
parent[bios] Set character attributes only when necessary (diff)
downloadipxe-97dcc824bf298788e37f6869417662b0b9d16102.tar.gz
ipxe-97dcc824bf298788e37f6869417662b0b9d16102.tar.xz
ipxe-97dcc824bf298788e37f6869417662b0b9d16102.zip
[image] Add concept of trusted images
Trusted images may always be executed. Untrusted images may be executed only if the current image trust requirement allows untrusted images. Images can be marked as trusted using image_trust(), and marked as untrusted using image_untrust(). The current image trust requirement can be changed using image_set_trust(). It is possible to make the change permanent, in which case any future attempts to change the image trust requirement will fail. Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/usr')
-rw-r--r--src/usr/imgmgmt.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/usr/imgmgmt.c b/src/usr/imgmgmt.c
index e323dd0c..59011415 100644
--- a/src/usr/imgmgmt.c
+++ b/src/usr/imgmgmt.c
@@ -140,6 +140,8 @@ void imgstat ( struct image *image ) {
printf ( "%s : %zd bytes", image->name, image->len );
if ( image->type )
printf ( " [%s]", image->type->name );
+ if ( image->flags & IMAGE_TRUSTED )
+ printf ( " [TRUSTED]" );
if ( image->flags & IMAGE_SELECTED )
printf ( " [SELECTED]" );
if ( image->cmdline )