Re: [SeaBIOS] [PATCH v3] Add option to only execute CBFS option ROMs

[Timothy Pearson]

On 02/10/2015 10:26 PM, Peter Stuge wrote:
> Timothy Pearson wrote:
> > I can try.  I am nowhere near as familiar with SeaBIOS as I am with
> > coreboot so this might take longer than expected.
>
> Fair enough! I think there will be a lot of reusable code in SeaBIOS
> already.
>
> For accessing a CBFS file try: git grep romfile_loadfile
>
> For parsing file into a string array see loadBootOrder() in src/boot.c.
> (Not so pretty, basically open-coding strtok(), but gets the job done.)
> > There are reasons to want a blob-free system, including security.
>
> Agreed.
>
> //Peter

Please find the two patches attached.  The first is the sledgehammer for 
security nuts, and the second is the fine-grained blacklist for everyone 
else.