OvmfPkg/Library/PlatformSecureLib/PlatformSecureLib.c

   1 /** @file
   2   Provides a platform-specific method to enable Secure Boot Custom Mode setup.
   3
   4   Copyright (c) 2006 - 2012, Intel Corporation. All rights reserved.<BR>
   5   SPDX-License-Identifier: BSD-2-Clause-Patent
   6
   7 **/
   8 #include <Library/PcdLib.h>
   9
  10 /**
  11
  12   This function provides a platform-specific method to detect whether the platform
  13   is operating by a physically present user.
  14
  15   Programmatic changing of platform security policy (such as disable Secure Boot,
  16   or switch between Standard/Custom Secure Boot mode) MUST NOT be possible during
  17   Boot Services or after exiting EFI Boot Services. Only a physically present user
  18   is allowed to perform these operations.
  19
  20   NOTE THAT: This function cannot depend on any EFI Variable Service since they are
  21   not available when this function is called in AuthenticateVariable driver.
  22
  23   @retval  TRUE       The platform is operated by a physically present user.
  24   @retval  FALSE      The platform is NOT operated by a physically present user.
  25
  26 **/
  27 BOOLEAN
  28 EFIAPI
  29 UserPhysicalPresent (
  30   VOID
  31   )
  32 {
  33   return TRUE;
  34 }