2022/09/07

[makubacki]

Do we want to maintain UEFI Spec compliance?

• No.
• We feel the UEFI Spec interface is out of touch with today's use cases. We would like to prototype what a refreshed interface looks like.

Main work areas decided upon:

• @makubacki - Overall project management and direction
• @apop5 & @makubacki - User-facing interface design
  • @kenlautner - Considering how prior "UEFI variable policy" behavior maps into this solution
  • Note: Examples of unit testing previously performed on "UEFI variable policy" is in the VariablePolicyFuncTestApp Readme.
• @makubacki & @apop5 - Front-end responsibilities and implementation
  • Define validation (business) logic
  • @makubacki - Variable router
• @os-d & @kenlautner - Firmware Volume Block (FVB) back-end implementation
• @cfernald & @kuqin12 - Devise a plan on how to best abstract Trusted Execution Environments
  • Note: We will also need an initial list of TEEs we should consider so the needs of those can be evaluated
• @Flickdm - Ideas around variable authentication and Secure Boot Advanced Targeting (SBAT) requirements
  • What would an ideal SBAT solution look like?