[SeaBIOS] [PATCH v3] Add option to only execute CBFS option ROMs

[Timothy Pearson]

On 02/10/2015 10:26 PM, Peter Stuge wrote:
> Timothy Pearson wrote:
>> I can try.  I am nowhere near as familiar with SeaBIOS as I am with
>> coreboot so this might take longer than expected.
>
> Fair enough! I think there will be a lot of reusable code in SeaBIOS
> already.
>
> For accessing a CBFS file try: git grep romfile_loadfile
>
> For parsing file into a string array see loadBootOrder() in src/boot.c.
> (Not so pretty, basically open-coding strtok(), but gets the job done.)
>
>
>>
>> There are reasons to want a blob-free system, including security.
>
> Agreed.
>
>
> //Peter

Please find the two patches attached.  The first is the sledgehammer for 
security nuts, and the second is the fine-grained blacklist for everyone 
else.

-- 
Timothy Pearson
Raptor Engineering
+1 (415) 727-8645
http://www.raptorengineeringinc.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1975-Add-an-option-to-only-execute-option-ROMs-contained-.patch
Type: text/x-diff
Size: 1996 bytes
Desc: not available
URL: <http://www.seabios.org/pipermail/seabios/attachments/20150211/a0e76c50/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1976-Add-PCI-option-ROM-blacklist-in-CBFS.patch
Type: text/x-diff
Size: 5999 bytes
Desc: not available
URL: <http://www.seabios.org/pipermail/seabios/attachments/20150211/a0e76c50/attachment-0001.bin>