Commit 5da2d3cd authored by Sughosh Ganu's avatar Sughosh Ganu Committed by Heinrich Schuchardt

efi_loader: capsule: Remove the check for capsule_authentication_enabled environment variable

The current capsule authentication code checks if the environment
variable capsule_authentication_enabled is set, for authenticating the
capsule. This is in addition to the check for the config symbol
CONFIG_EFI_CAPSULE_AUTHENTICATE. Remove the check for the environment
variable. The capsule will now be authenticated if the config symbol
is set.
Signed-off-by: default avatarSughosh Ganu <>
Reviwed-by: Heinrich Schuchardt's avatarHeinrich Schuchardt <>
parent 8ddaf943
......@@ -41,9 +41,3 @@ int efi_get_public_key_data(void **pkey, efi_uintn_t *pkey_len)
return 0;
bool efi_capsule_auth_enabled(void)
return env_get("capsule_authentication_enabled") != NULL ?
true : false;
......@@ -190,7 +190,7 @@ static efi_status_t efi_get_dfu_info(
/* Check if the capsule authentication is enabled */
if (env_get("capsule_authentication_enabled"))
image_info[0].attributes_setting |=
......@@ -421,8 +421,7 @@ efi_status_t EFIAPI efi_firmware_raw_set_image(
/* Authenticate the capsule if authentication enabled */
env_get("capsule_authentication_enabled")) {
capsule_payload = NULL;
capsule_payload_size = 0;
status = efi_capsule_authenticate(image, image_size,
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment