summaryrefslogtreecommitdiffstats
path: root/src/include/usr/secureboot/settings.H
diff options
context:
space:
mode:
Diffstat (limited to 'src/include/usr/secureboot/settings.H')
-rw-r--r--src/include/usr/secureboot/settings.H11
1 files changed, 10 insertions, 1 deletions
diff --git a/src/include/usr/secureboot/settings.H b/src/include/usr/secureboot/settings.H
index 417e14d96..491c607d3 100644
--- a/src/include/usr/secureboot/settings.H
+++ b/src/include/usr/secureboot/settings.H
@@ -90,7 +90,8 @@ namespace SECUREBOOT
class Settings
{
public:
- Settings() : iv_enabled(false) { _init(); };
+ Settings() : iv_enabled(false),
+ iv_bestEffortPolicy(false) { _init(); };
~Settings() {};
/** @brief Determine if Secureboot is enabled. */
@@ -135,6 +136,13 @@ namespace SECUREBOOT
TARGETING::Target* i_pProc
= TARGETING::MASTER_PROCESSOR_CHIP_TARGET_SENTINEL) const;
+ /** @brief Determines if the Secureboot best effort policy is
+ * enabled. Uses knowledge of compile config options and
+ * secure mode enabled
+ * @return bool - True if enabled, false otherwise
+ */
+ bool getBestEffortPolicy() const;
+
private:
void _init();
@@ -184,6 +192,7 @@ namespace SECUREBOOT
/** Cached secure boot enabled value */
bool iv_enabled;
+ bool iv_bestEffortPolicy;
};
}
OpenPOWER on IntegriCloud