uefi-ref/edk2
1
0
Fork 0
mirror of https://github.com/tianocore/edk2 synced 2026-08-27 00:23:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

OvmfPkg/LoongArchVirt: Don't add Shell driver if secure boot is enabled

Browse source 
For security reason, the UEFI Shell should not be available when Secure
Boot is enabled, as discussed in https://github.com/tianocore/edk2/issues/10471.

This patch removes the direct inclusion of the Shell driver and switches
to using the common ShellDxe.fdf.inc include file, as done for other
architectures. This makes the Shell driver conditionally included based
on the Secure Boot configuration, so that it will be excluded when Secure
Boot is enabled.

Signed-off-by: Qihang Gao <gaoqihang@loongson.cn>
This commit is contained in:
Qihang Gao 2026-08-18 10:37:47 +08:00
parent 2970e5699b
commit 0e3e19f77e
1 changed files with 1 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
OvmfPkg/LoongArchVirt/LoongArchVirtQemu.fdf
View file

@ -207,10 +207,7 @@ INF FatPkg/EnhancedFatDxe/Fat.inf
INF MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf
INF OvmfPkg/VirtioFsDxe/VirtioFsDxe.inf
#
#Boot OS
#
INF ShellPkg/Application/Shell/Shell.inf
!include OvmfPkg/Include/Fdf/ShellDxe.fdf.inc
INF MdeModulePkg/Universal/Acpi/FirmwarePerformanceDataTableDxe/FirmwarePerformanceDxe.inf
INF ShellPkg/DynamicCommand/DpDynamicCommand/DpDynamicCommand.inf