grub2-dev: Lockdown framework

1 
1 12 Lockdown framework
1 *********************
1 
1 The GRUB can be locked down, which is a restricted mode where some
1 operations are not allowed.  For instance, some commands cannot be used
1 when the GRUB is locked down.
1 
1    The function 'grub_lockdown()' is used to lockdown GRUB and the
1 function 'grub_is_lockdown()' function can be used to check whether
1 lockdown is enabled or not.  When enabled, the function returns
1 'GRUB_LOCKDOWN_ENABLED' and 'GRUB_LOCKDOWN_DISABLED' when is not
1 enabled.
1 
1    The following functions can be used to register the commands that can
1 only be used when lockdown is disabled:
1 
1    * 'grub_cmd_lockdown()' registers command which should not run when
1      the GRUB is in lockdown mode.
1 
1    * 'grub_cmd_lockdown()' registers extended command which should not
1      run when the GRUB is in lockdown mode.
1