diff --git a/Docs/Configuration.pdf b/Docs/Configuration.pdf index 14017b744e12af2a4d0ded80fc9e1ba3d751fec1..772b790aa60d007c86e57c2abe2702037bc612c4 100644 Binary files a/Docs/Configuration.pdf and b/Docs/Configuration.pdf differ diff --git a/Docs/Configuration.tex b/Docs/Configuration.tex index e212391e0d8901434de6242926da30f154fbf2c4..ad771b9f9614c5853e11168b670850ec46d325b8 100755 --- a/Docs/Configuration.tex +++ b/Docs/Configuration.tex @@ -2393,7 +2393,7 @@ nvram 4D1FDA02-38C7-4A6A-9CC6-4BCCA8B30102:oem-board # SMBIOS Type2 ProductNam \begin{itemize} \tightlist - \item \texttt{Optional} --- require nothing, no vault is used, insecure. + \item \texttt{Optional} --- require nothing, no vault is enforced, insecure. \item \texttt{Basic} --- require \texttt{vault.plist} file present in \texttt{OC} directory. This provides basic filesystem integrity verification and may protect from unintentional filesystem corruption. diff --git a/Docs/Differences/Differences.pdf b/Docs/Differences/Differences.pdf index dbe5da3d88b313a4a1497e2a33c93085c15a6468..61394f78dfdf66e2d89f6e86b4d7043552c4fa4f 100644 Binary files a/Docs/Differences/Differences.pdf and b/Docs/Differences/Differences.pdf differ diff --git a/Docs/Differences/Differences.tex b/Docs/Differences/Differences.tex index 724ec1bd6800f658e4dd5f5a98400a2c275bbdfe..4c4eb66fbc4029c1c7c982782ecc3259c9ac821b 100644 --- a/Docs/Differences/Differences.tex +++ b/Docs/Differences/Differences.tex @@ -1,7 +1,7 @@ \documentclass[]{article} %DIF LATEXDIFF DIFFERENCE FILE %DIF DEL PreviousConfiguration.tex Thu Feb 6 00:43:28 2020 -%DIF ADD ../Configuration.tex Sun Feb 9 00:48:51 2020 +%DIF ADD ../Configuration.tex Sun Feb 9 01:08:55 2020 \usepackage{lmodern} \usepackage{amssymb,amsmath} @@ -2740,7 +2740,7 @@ nvram 4D1FDA02-38C7-4A6A-9CC6-4BCCA8B30102:oem-board # SMBIOS Type2 ProductNam \begin{itemize} \tightlist - \item \texttt{\DIFadd{Optional}} \DIFadd{--- require nothing, no vault is used, insecure. + \item \texttt{\DIFadd{Optional}} \DIFadd{--- require nothing, no vault is enforced, insecure. }\item \texttt{\DIFadd{Basic}} \DIFadd{--- require }\texttt{\DIFadd{vault.plist}} \DIFadd{file present in }\texttt{\DIFadd{OC}} \DIFadd{directory. This provides basic filesystem integrity verification and may protect from unintentional filesystem corruption. diff --git a/Platform/OpenCore/OpenCoreMisc.c b/Platform/OpenCore/OpenCoreMisc.c index a4219d03c43ca15f12716ff3a90f9def08401574..45f7f75802ba1cbcbc1da7a4bc63e5bb9057ded2 100644 --- a/Platform/OpenCore/OpenCoreMisc.c +++ b/Platform/OpenCore/OpenCoreMisc.c @@ -220,6 +220,7 @@ OcMiscEarlyInit ( return EFI_UNSUPPORTED; ///< Should be unreachable. } + AsciiVault = OC_BLOB_GET (&Config->Misc.Security.Vault); if (AsciiStrCmp (AsciiVault, "Secure") == 0) { Vault = OcsVaultSecure; } else if (AsciiStrCmp (AsciiVault, "Optional") == 0) { @@ -267,7 +268,7 @@ OcMiscEarlyInit ( DEBUG_INFO, "OC: OpenCore %a is loading in %a mode (%d/%d)...\n", OcMiscGetVersionString (), - Config->Misc.Security.Vault, + AsciiVault, Storage->HasVault, VaultKey != NULL ));