MdeModulePkg: Allow VariablePolicy state to delete protected variables

[mirror_edk2.git] / MdeModulePkg / Universal / Variable / RuntimeDxe / VariableStandaloneMm.inf

## @file\r
#  Provides SMM variable service.\r
#\r
#  This module installs SMM variable protocol into SMM protocol database,\r
#  which can be used by SMM driver, and installs SMM variable protocol\r
#  into BS protocol database, which can be used to notify the SMM Runtime\r
#  Dxe driver that the SMM variable service is ready.\r
#  This module should be used with SMM Runtime DXE module together. The\r
#  SMM Runtime DXE module would install variable arch protocol and variable\r
#  write arch protocol based on SMM variable module.\r
#\r
#  Caution: This module requires additional review when modified.\r
#  This driver will have external input - variable data and communicate buffer in SMM mode.\r
#  This external input must be validated carefully to avoid security issues such as\r
#  buffer overflow or integer overflow.\r
#    The whole SMM authentication variable design relies on the integrity of flash part and SMM.\r
#  which is assumed to be protected by platform.  All variable code and metadata in flash/SMM Memory\r
#  may not be modified without authorization. If platform fails to protect these resources,\r
#  the authentication service provided in this driver will be broken, and the behavior is undefined.\r
#\r
# Copyright (c) 2010 - 2019, Intel Corporation. All rights reserved.<BR>\r
# Copyright (c) 2018, Linaro, Ltd. All rights reserved.<BR>\r
# Copyright (c) Microsoft Corporation.\r
# SPDX-License-Identifier: BSD-2-Clause-Patent\r
#\r
##\r
\r
[Defines]\r
  INF_VERSION                    = 0x0001001B\r
  BASE_NAME                      = VariableStandaloneMm\r
  FILE_GUID                      = 7ee2c0c1-c21a-4113-a53a-66824a95696f\r
  MODULE_TYPE                    = MM_STANDALONE\r
  VERSION_STRING                 = 1.0\r
  PI_SPECIFICATION_VERSION       = 0x00010032\r
  ENTRY_POINT                    = VariableServiceInitialize\r
\r
#\r
# The following information is for reference only and not required by the build tools.\r
#\r
#  VALID_ARCHITECTURES           = IA32 X64 ARM AARCH64\r
#\r
\r
\r
[Sources]\r
  Reclaim.c\r
  Variable.c\r
  VariableSmm.c\r
  VariableStandaloneMm.c\r
  VariableNonVolatile.c\r
  VariableNonVolatile.h\r
  VariableParsing.c\r
  VariableParsing.h\r
  VariableRuntimeCache.c\r
  VariableRuntimeCache.h\r
  VarCheck.c\r
  Variable.h\r
  PrivilegePolymorphic.h\r
  VariableExLib.c\r
  TcgMorLockSmm.c\r
  SpeculationBarrierSmm.c\r
\r
[Packages]\r
  MdePkg/MdePkg.dec\r
  MdeModulePkg/MdeModulePkg.dec\r
  StandaloneMmPkg/StandaloneMmPkg.dec\r
\r
[LibraryClasses]\r
  AuthVariableLib\r
  BaseLib\r
  BaseMemoryLib\r
  DebugLib\r
  HobLib\r
  MemoryAllocationLib\r
  MmServicesTableLib\r
  StandaloneMmDriverEntryPoint\r
  SynchronizationLib\r
  VarCheckLib\r
  VariablePolicyLib\r
\r
[Protocols]\r
  gEfiSmmFirmwareVolumeBlockProtocolGuid        ## CONSUMES\r
  ## CONSUMES\r
  ## NOTIFY\r
  gEfiSmmFaultTolerantWriteProtocolGuid\r
  ## PRODUCES\r
  ## UNDEFINED # SmiHandlerRegister\r
  gEfiSmmVariableProtocolGuid\r
  gEfiMmEndOfDxeProtocolGuid                   ## NOTIFY\r
  gEdkiiSmmVarCheckProtocolGuid                ## PRODUCES\r
\r
[Guids]\r
  ## SOMETIMES_CONSUMES   ## GUID # Signature of Variable store header\r
  ## SOMETIMES_PRODUCES   ## GUID # Signature of Variable store header\r
  ## SOMETIMES_CONSUMES   ## HOB\r
  ## SOMETIMES_PRODUCES   ## SystemTable\r
  gEfiAuthenticatedVariableGuid\r
\r
  ## SOMETIMES_CONSUMES   ## GUID # Signature of Variable store header\r
  ## SOMETIMES_PRODUCES   ## GUID # Signature of Variable store header\r
  ## SOMETIMES_CONSUMES   ## HOB\r
  ## SOMETIMES_PRODUCES   ## SystemTable\r
  gEfiVariableGuid\r
\r
  ## SOMETIMES_CONSUMES   ## Variable:L"PlatformLang"\r
  ## SOMETIMES_PRODUCES   ## Variable:L"PlatformLang"\r
  ## SOMETIMES_CONSUMES   ## Variable:L"Lang"\r
  ## SOMETIMES_PRODUCES   ## Variable:L"Lang"\r
  gEfiGlobalVariableGuid\r
\r
  gEfiMemoryOverwriteControlDataGuid            ## SOMETIMES_CONSUMES   ## Variable:L"MemoryOverwriteRequestControl"\r
  gEfiMemoryOverwriteRequestControlLockGuid     ## SOMETIMES_PRODUCES   ## Variable:L"MemoryOverwriteRequestControlLock"\r
\r
  gEfiSystemNvDataFvGuid                        ## CONSUMES             ## GUID\r
  gEdkiiFaultTolerantWriteGuid                  ## SOMETIMES_CONSUMES   ## HOB\r
\r
  ## SOMETIMES_CONSUMES   ## Variable:L"VarErrorFlag"\r
  ## SOMETIMES_PRODUCES   ## Variable:L"VarErrorFlag"\r
  gEdkiiVarErrorFlagGuid\r
\r
[FixedPcd]\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize       ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase       ## SOMETIMES_CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64     ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize                  ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxAuthVariableSize              ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVolatileVariableSize          ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize     ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize                ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize                 ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdMaxUserNvVariableSpaceSize           ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdBoottimeReservedNvVariableSpaceSize  ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdReclaimVariableSpaceAtEndOfDxe   ## CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvModeEnable          ## SOMETIMES_CONSUMES\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvStoreReserved       ## SOMETIMES_CONSUMES\r
\r
[FeaturePcd]\r
  gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics        ## CONSUMES  # statistic the information of variable.\r
  gEfiMdePkgTokenSpaceGuid.PcdUefiVariableDefaultLangDeprecate       ## CONSUMES  # Auto update PlatformLang/Lang\r
\r
[Depex]\r
  TRUE\r