Wind River Support Network

Description

Booting in insecure mode
Invalid call dxe_update_mem_attrs(addr:0x6AFC3680-0x6AFC467F, size:0x1000, +r, -wx)
 addr is not page aligned
SELoader 0.4.6+git8b90f76a8df51d9020e67824026556434f407086 launched
Invalid attribute of MokSBState (0x3)
Unable to retrieve MokSBState

Steps to Reproduce

Build steps:
http://pek-lpgtest7408.wrs.com/buildarea1/SharedImage/LTS25/BSP/intel-x86-64_standard_glibc-std_Security_seloader_latest/latest/build_steps.log


/lpg-build/cdc/fast_prod/WRL10_25/RCPL0001_LX08/wrlinux-10/setup.sh --machines intel-x86-64 --templates feature/efi-secure-boot feature/encrypted-storage feature/ima --distros wrlinux --dl-layers=1 --accept-eula=yes
source environment-setup-x86_64-wrlinuxsdk-linux
source oe-init-build-env build

cat << EOF >> customized_test_plan.ini
[Test_Case]
disk_encryption_luks
tpm2_unseal_passphrase
secure_boot_grubentry
secure_boot_trust_keys
secure_boot_DB_cert
secure_boot_PK_cert
secure_boot_mok_vendor_cert
secure_boot_mokutil_sb-state
ima_bash_denied
ima_kernel-module_denied
ima_ordinary-user_denied
ima_python_denied
disk_encryption_cryptsetup_example
secure_boot_trust_grubcfg
secure_boot_trust_grubefi
secure_boot_trust_kernel-initrd
secure_boot_trust_keys
[Test_HW]
EOF

echo 'BB_NUMBER_THREADS ?= "24"' >> conf/local.conf
echo 'PARALLEL_MAKE ?= "-j 24"' >> conf/local.conf
bitbake-layers add-layer /lpg-build/cdc/WASSP_LINUX_1025/testcases/wrlinux/wr-testing/bts-dev

#####To Clone a whole new testcases layer#####
git clone --depth 1 -b master git://lxgit.wrs.com/wrlinux-testing/testcases.git ../layers/testcases/wrlinux/
bitbake-layers add-layer ../layers/testcases/wrlinux/wr-testing/bts-dev
#####End#####

echo '
require templates/feature/bts/template.conf
IMAGE_FSTYPES += " tar.bz2"
ACTIVE_PLAN = "customized_test_plan.ini"' >> conf/local.conf
echo 'IMAGE_FSTYPES:remove = " live hddimg iso"' >> conf/local.conf
bitbake-layers add-layer /net/pek-lpgtest7408/buildarea1/SharedImage/wrlinux-testing-dl
echo 'GRUB_SIGN_VERIFY = "0"
UEFI_SELOADER = "1"' >> conf/local.conf
bitbake wrlinux-image-std


dd http://pek-lpgtest7408.wrs.com/buildarea1/SharedImage/LTS25/BSP/intel-x86-64_standard_glibc-std_Security_seloader_latest/latest/wrlinux-intel-x86-64_glibc-std_seloader.wic into one USB disk, then boot it from NUC7 or Meteor-Lake-H(29339, need use workaround from LIN1025-2704)

Booting target with secure boot enabled, and type below commands:

mokutil --sb-state
mokutil --disable-validation
reboot