MdePkg: Add AuditMode/DeployedMode name definition

Add AuditMode/DeployedMode definition from Enable Secure Boot feature defined in UEFI2.5 Mantis 1263.
  https://mantis.uefi.org/mantis/view.php?id=1263

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Chao Zhang <chao.b.zhang@intel.com>
Reviewed-by: Zeng Star <star.zeng@intel.com>
Reviewed-by: Long Qin <qin.long@intel.com>
git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@19130 6f19259b-4bc3-4df7-8a09-765794883524

diff --git a/MdePkg/Include/Guid/GlobalVariable.h b/MdePkg/Include/Guid/GlobalVariable.h
index 1e4fbc822718533e00a2191dc9eac50ab307cc3a..e58f7a1e8c01a3a6c4c1ca32f5a9ad50d0f17dfc 100644 (file)
--- a/MdePkg/Include/Guid/GlobalVariable.h
+++ b/MdePkg/Include/Guid/GlobalVariable.h
@@ -126,6 +126,20 @@ extern EFI_GUID gEfiGlobalVariableGuid;
 ///\r
 #define EFI_SETUP_MODE_NAME                         L"SetupMode"\r
 ///\r
+/// Whether the system is operating in audit mode (1) or not (0).\r
+/// All other values are reserved. Should be treated as read-only except when DeployedMode is 0.\r
+/// Always becomes read-only after ExitBootServices() is called.\r
+/// Its attribute is BS+RT.\r
+///\r
+#define EFI_AUDIT_MODE_NAME                         L"AuditMode"\r
+///\r
+/// Whether the system is operating in deployed mode (1) or not (0).\r
+/// All other values are reserved. Should be treated as read-only when its value is 1.\r
+/// Always becomes read-only after ExitBootServices() is called.\r
+/// Its attribute is BS+RT.\r
+///\r
+#define EFI_DEPLOYED_MODE_NAME                      L"DeployedMode"\r
+///\r
 /// The Key Exchange Key Signature Database.\r
 /// Its attribute is NV+BS+RT+AT.\r
 ///\r

diff --git a/MdePkg/Include/Guid/ImageAuthentication.h b/MdePkg/Include/Guid/ImageAuthentication.h
index 4f4296086d75c6c1e99d3aa17a3da904d184847a..2f51935c0c76bc18c6c07da1aa93077eb1755d7b 100644 (file)
--- a/MdePkg/Include/Guid/ImageAuthentication.h
+++ b/MdePkg/Include/Guid/ImageAuthentication.h
@@ -43,9 +43,12 @@
 \r
 #define SECURE_BOOT_MODE_ENABLE           1\r
 #define SECURE_BOOT_MODE_DISABLE          0\r
-#define SETUP_MODE                        1\r
-#define USER_MODE                         0\r
-\r
+#define SETUP_MODE_ENABLE                 1\r
+#define SETUP_MODE_DISABLE                0\r
+#define DEPLOYED_MODE_ENABLE              1\r
+#define DEPLOYED_MODE_DISABLE             0\r
+#define AUDIT_MODE_ENABLE                 1\r
+#define AUDIT_MODE_DISABLE                0\r
 \r
 //***********************************************************************\r
 // Signature Database\r