c7zero 8155afb2f4 Improved EFI binaries search and updated blacklist config (#131) ...

* Changes in calculating hashes of EFI binaries

Calculating hashes of actual .efi executable files (PE32/TE sections of
EFI binaries) rather than of entire EFI binaries.

There's still an option (WRITE_ALL_HASHES) to calculate hashes of entire
EFI binaries.

* Improved UEFI search and updated blacklist config

1. Updated EFI binaries search - searching only leaf nodes (PE/TE
executable sections)
2. Added exclusion criteria and improved JSON format
3. Changed tools.uefi.blacklist module to return a warning
4. Updated ThinkPwn rules in blacklist.json
- Updated config to match by GUID AND regexp of SmmRuntime protcol GUID
within the binary to skip binaries consuming SmmRuntime protcol
- Added exclusion rules for UEFI update images with patched
SystemSmmRuntimeRt.efi. Config excludes patched binaries from Lenovo and
HP. Tested on Intel, Lenovo, HP and Gigabyte images.

2016-12-05 15:11:51 -08:00

..

cpu

Changed to using self.cs.cpu

2016-11-17 23:47:45 -08:00

secureboot

change setup.py build driver by default. change root directory of chipsec. move WARNING.txt to chipsec. remove PKG-INFO (#107)

2016-10-18 18:19:42 -07:00

smm

change setup.py build driver by default. change root directory of chipsec. move WARNING.txt to chipsec. remove PKG-INFO (#107)

2016-10-18 18:19:42 -07:00

uefi

Improved EFI binaries search and updated blacklist config (#131)

2016-12-05 15:11:51 -08:00

vmm

Use HALBase for all HAL modules (#124)

2016-11-17 23:21:26 -08:00

__init__.py

change setup.py build driver by default. change root directory of chipsec. move WARNING.txt to chipsec. remove PKG-INFO (#107)

2016-10-18 18:19:42 -07:00