]> git.proxmox.com Git - mirror_edk2.git/blame - MdeModulePkg/Include/Protocol/VariablePolicy.h
UefiCpuPkg: Move AsmRelocateApLoopStart from Mpfuncs.nasm to AmdSev.nasm
[mirror_edk2.git] / MdeModulePkg / Include / Protocol / VariablePolicy.h
CommitLineData
d11e2359
BB
1/** @file -- VariablePolicy.h\r
2\r
3This protocol allows communication with Variable Policy Engine.\r
4\r
5Copyright (c) Microsoft Corporation.\r
6SPDX-License-Identifier: BSD-2-Clause-Patent\r
7**/\r
8\r
9#ifndef __EDKII_VARIABLE_POLICY_PROTOCOL__\r
10#define __EDKII_VARIABLE_POLICY_PROTOCOL__\r
11\r
1436aea4 12#define EDKII_VARIABLE_POLICY_PROTOCOL_REVISION 0x0000000000010000\r
d11e2359
BB
13\r
14#define EDKII_VARIABLE_POLICY_PROTOCOL_GUID \\r
15 { \\r
16 0x81D1675C, 0x86F6, 0x48DF, { 0xBD, 0x95, 0x9A, 0x6E, 0x4F, 0x09, 0x25, 0xC3 } \\r
17 }\r
18\r
1436aea4 19#define VARIABLE_POLICY_ENTRY_REVISION 0x00010000\r
d11e2359
BB
20\r
21#pragma pack(push, 1)\r
22typedef struct {\r
1436aea4
MK
23 UINT32 Version;\r
24 UINT16 Size;\r
25 UINT16 OffsetToName;\r
26 EFI_GUID Namespace;\r
27 UINT32 MinSize;\r
28 UINT32 MaxSize;\r
29 UINT32 AttributesMustHave;\r
30 UINT32 AttributesCantHave;\r
31 UINT8 LockPolicyType;\r
32 UINT8 Padding[3];\r
d11e2359
BB
33 // UINT8 LockPolicy[]; // Variable Length Field\r
34 // CHAR16 Name[] // Variable Length Field\r
35} VARIABLE_POLICY_ENTRY;\r
36\r
1436aea4
MK
37#define VARIABLE_POLICY_NO_MIN_SIZE 0\r
38#define VARIABLE_POLICY_NO_MAX_SIZE MAX_UINT32\r
39#define VARIABLE_POLICY_NO_MUST_ATTR 0\r
40#define VARIABLE_POLICY_NO_CANT_ATTR 0\r
d11e2359
BB
41\r
42#define VARIABLE_POLICY_TYPE_NO_LOCK 0\r
43#define VARIABLE_POLICY_TYPE_LOCK_NOW 1\r
44#define VARIABLE_POLICY_TYPE_LOCK_ON_CREATE 2\r
45#define VARIABLE_POLICY_TYPE_LOCK_ON_VAR_STATE 3\r
46\r
47typedef struct {\r
1436aea4
MK
48 EFI_GUID Namespace;\r
49 UINT8 Value;\r
50 UINT8 Padding;\r
d11e2359
BB
51 // CHAR16 Name[]; // Variable Length Field\r
52} VARIABLE_LOCK_ON_VAR_STATE_POLICY;\r
53#pragma pack(pop)\r
54\r
55/**\r
56 This API function disables the variable policy enforcement. If it's\r
57 already been called once, will return EFI_ALREADY_STARTED.\r
58\r
59 @retval EFI_SUCCESS\r
60 @retval EFI_ALREADY_STARTED Has already been called once this boot.\r
61 @retval EFI_WRITE_PROTECTED Interface has been locked until reboot.\r
62 @retval EFI_WRITE_PROTECTED Interface option is disabled by platform PCD.\r
63\r
64**/\r
65typedef\r
66EFI_STATUS\r
67(EFIAPI *DISABLE_VARIABLE_POLICY)(\r
68 VOID\r
69 );\r
70\r
71/**\r
72 This API function returns whether or not the policy engine is\r
73 currently being enforced.\r
74\r
75 @param[out] State Pointer to a return value for whether the policy enforcement\r
76 is currently enabled.\r
77\r
78 @retval EFI_SUCCESS\r
79 @retval Others An error has prevented this command from completing.\r
80\r
81**/\r
82typedef\r
83EFI_STATUS\r
84(EFIAPI *IS_VARIABLE_POLICY_ENABLED)(\r
85 OUT BOOLEAN *State\r
86 );\r
87\r
88/**\r
89 This API function validates and registers a new policy with\r
90 the policy enforcement engine.\r
91\r
92 @param[in] NewPolicy Pointer to the incoming policy structure.\r
93\r
94 @retval EFI_SUCCESS\r
95 @retval EFI_INVALID_PARAMETER NewPolicy is NULL or is internally inconsistent.\r
96 @retval EFI_ALREADY_STARTED An identical matching policy already exists.\r
97 @retval EFI_WRITE_PROTECTED The interface has been locked until the next reboot.\r
98 @retval EFI_ABORTED A calculation error has prevented this function from completing.\r
99 @retval EFI_OUT_OF_RESOURCES Cannot grow the table to hold any more policies.\r
100\r
101**/\r
102typedef\r
103EFI_STATUS\r
104(EFIAPI *REGISTER_VARIABLE_POLICY)(\r
105 IN CONST VARIABLE_POLICY_ENTRY *PolicyEntry\r
106 );\r
107\r
108/**\r
109 This API function will dump the entire contents of the variable policy table.\r
110\r
111 Similar to GetVariable, the first call can be made with a 0 size and it will return\r
112 the size of the buffer required to hold the entire table.\r
113\r
114 @param[out] Policy Pointer to the policy buffer. Can be NULL if Size is 0.\r
115 @param[in,out] Size On input, the size of the output buffer. On output, the size\r
116 of the data returned.\r
117\r
118 @retval EFI_SUCCESS Policy data is in the output buffer and Size has been updated.\r
119 @retval EFI_INVALID_PARAMETER Size is NULL, or Size is non-zero and Policy is NULL.\r
120 @retval EFI_BUFFER_TOO_SMALL Size is insufficient to hold policy. Size updated with required size.\r
121\r
122**/\r
123typedef\r
124EFI_STATUS\r
125(EFIAPI *DUMP_VARIABLE_POLICY)(\r
126 IN OUT UINT8 *Policy,\r
127 IN OUT UINT32 *Size\r
128 );\r
129\r
130/**\r
131 This API function locks the interface so that no more policy updates\r
132 can be performed or changes made to the enforcement until the next boot.\r
133\r
134 @retval EFI_SUCCESS\r
135 @retval Others An error has prevented this command from completing.\r
136\r
137**/\r
138typedef\r
139EFI_STATUS\r
140(EFIAPI *LOCK_VARIABLE_POLICY)(\r
141 VOID\r
142 );\r
143\r
144typedef struct {\r
1436aea4
MK
145 UINT64 Revision;\r
146 DISABLE_VARIABLE_POLICY DisableVariablePolicy;\r
147 IS_VARIABLE_POLICY_ENABLED IsVariablePolicyEnabled;\r
148 REGISTER_VARIABLE_POLICY RegisterVariablePolicy;\r
149 DUMP_VARIABLE_POLICY DumpVariablePolicy;\r
150 LOCK_VARIABLE_POLICY LockVariablePolicy;\r
d11e2359
BB
151} _EDKII_VARIABLE_POLICY_PROTOCOL;\r
152\r
153typedef _EDKII_VARIABLE_POLICY_PROTOCOL EDKII_VARIABLE_POLICY_PROTOCOL;\r
154\r
1436aea4 155extern EFI_GUID gEdkiiVariablePolicyProtocolGuid;\r
d11e2359
BB
156\r
157#endif\r