[meta-intel] [PATCH 0/2] systemd-boot: stub: RMC hardening and NUC boot fixes

[Mikko Ylinen]

These two patches bring fixes to [YOCTO #11030] and [YOCTO #11078].

The first patch improves how the RMC db is read by the stub. This is
needed to be able to use secure boot without backdoors while keeping
RMC enabled.

The second patch fixes a boot problem on some NUCs where the stub
resets the kernel cmdline due to bogus LoadOptions/LoadOptionsSize
set by the UEFI bootloader/shell.

Mikko Ylinen (2):
  systemd-boot: stub: use built-in RMC db only
  systemd-boot: stub: check LoadOptions contains data

 ...boot-stub-check-LoadOptions-contains-data.patch | 42 ++++++++++++
 ...-kernel-command-line-fragment-in-EFI-stub.patch | 78 +++++++++++-----------
 .../systemd-boot/systemd-boot_%.bbappend           |  1 +
 3 files changed, 83 insertions(+), 38 deletions(-)
 create mode 100644 common/recipes-bsp/systemd-boot/systemd-boot/0001-sd-boot-stub-check-LoadOptions-contains-data.patch

-- 
2.11.0