EBBR Notes 2026.09.09

Attendees

• Heinrich Schuchardt (Canonical)
• Vincent Stehlé (Arm)

Agenda

• Pull request #169: Specify runtime access to file-backed variable stores
• Pull request #170: Require the Memory Attribute Protocol if Enhanced Memory Protection is supported

Notes

• Reviewed the two pull requests; both need changes before they can be integrated.

Raw notes

• Chatting
  • Heinrich: UEFI wants to deprecate private authenticated variables
• Pull request #169: Specify runtime access to file-backed variable stores
  • Heinrich: mention but do not require?
  • Provide the names of the variables as examples only, not mandatory
  • -> Requested changes and converted to draft, ping Ricardo
• Pull request #170: Require the Memory Attribute Protocol if Enhanced Memory Protection is supported
  • Heinrich: move URL to commit message
  • -> Respin with that change
  • Ilias has done the Arm MMU code in U-Boot, protects the firmware pages already

Links

• https://github.com/ARM-software/ebbr/pull/169
• https://github.com/ARM-software/ebbr/pull/170
• https://mantis.uefi.org/mantis/view.php?id=2568
• https://www.linaro.org/blog/u-boot-security-improvements-using-arm-memory-permissions