If the S3 boot script was not found, it will tell the user that instead of giving a false error.
Signed-off-by: Nathaniel Mitchell <nathaniel.p.mitchell@intel.com>
Removed Ntfs.efi detection by name (ui_string) to eliminate false
positives on firmware which has Ntfs.efi DXE driver.
Also, rkloader's and ntfs's GUIDs were swapped. Fixed.
tools.uefi.whitelist is a simple module for EFI firmware that allows modifications done to the firmware executables
The module can generate a list of EFI executables from (U)EFI firmware file or extracted from flash ROM, and then later check firmware image in flash ROM or file against this list of [expected/whitelisted] executables
* Changes in calculating hashes of EFI binaries
Calculating hashes of actual .efi executable files (PE32/TE sections of
EFI binaries) rather than of entire EFI binaries.
There's still an option (WRITE_ALL_HASHES) to calculate hashes of entire
EFI binaries.
* Improved UEFI search and updated blacklist config
1. Updated EFI binaries search - searching only leaf nodes (PE/TE
executable sections)
2. Added exclusion criteria and improved JSON format
3. Changed tools.uefi.blacklist module to return a warning
4. Updated ThinkPwn rules in blacklist.json
- Updated config to match by GUID AND regexp of SmmRuntime protcol GUID
within the binary to skip binaries consuming SmmRuntime protcol
- Added exclusion rules for UEFI update images with patched
SystemSmmRuntimeRt.efi. Config excludes patched binaries from Lenovo and
HP. Tested on Intel, Lenovo, HP and Gigabyte images.
nha