grub2-dev: Lockdown framework
1
1 12 Lockdown framework
1 *********************
1
1 The GRUB can be locked down, which is a restricted mode where some
1 operations are not allowed. For instance, some commands cannot be used
1 when the GRUB is locked down.
1
1 The function 'grub_lockdown()' is used to lockdown GRUB and the
1 function 'grub_is_lockdown()' function can be used to check whether
1 lockdown is enabled or not. When enabled, the function returns
1 'GRUB_LOCKDOWN_ENABLED' and 'GRUB_LOCKDOWN_DISABLED' when is not
1 enabled.
1
1 The following functions can be used to register the commands that can
1 only be used when lockdown is disabled:
1
1 * 'grub_cmd_lockdown()' registers command which should not run when
1 the GRUB is in lockdown mode.
1
1 * 'grub_cmd_lockdown()' registers extended command which should not
1 run when the GRUB is in lockdown mode.
1