Skip to content

Commit

Permalink
Make DFCI Lock Var Runtime accessible (#64)
Browse files Browse the repository at this point in the history
## Description

Due to how Variable Locking works the lock variable should be runtime
accessible.


- [x] Impacts functionality?
- [x] Impacts security?


## How This Was Tested

Code inspection

## Integration Instructions

NA
  • Loading branch information
spbrogan authored Mar 31, 2023
1 parent 3b324ef commit 4bf67f2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion DfciPkg/Include/Guid/DfciInternalVariableGuid.h
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ extern EFI_GUID gDfciInternalVariableGuid;
// Dfci Lock Variable.
//
#define DFCI_LOCK_VAR_NAME L"_DLCK"
#define DFCI_LOCK_VAR_ATTRIBUTES EFI_VARIABLE_BOOTSERVICE_ACCESS
#define DFCI_LOCK_VAR_ATTRIBUTES (EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS)
#define DFCI_LOCK_VAR_SIZE sizeof (UINT8)

extern EFI_GUID gDfciLockVariableGuid;
Expand Down

0 comments on commit 4bf67f2

Please sign in to comment.