Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Patch SeValidateImageHeader when disabling DSE at boot #111

Open
khang06 opened this issue Nov 20, 2023 · 1 comment
Open

Patch SeValidateImageHeader when disabling DSE at boot #111

khang06 opened this issue Nov 20, 2023 · 1 comment
Labels
feature New feature or request

Comments

@khang06
Copy link

khang06 commented Nov 20, 2023

Feature description

Currently, SeValidateImageData is being patched to return S_OK when EfiGuard is set to disable DSE at boot, but SeValidateImageHeader isn't, which causes some modifications to still trip DSE. (Windows 10 22H2 10.0.19045.3570)

Implementation

No response
@khang06 khang06 added the feature New feature or request label Nov 20, 2023
@Mattiwatti
Copy link
Owner

Hi,

Can you give some more information in order for me to reproduce this? I haven't personally experienced this before, and "some modifications" isn't enough detail for me to go on. What modifications specifically are you trying to make that are still being prevented by DSE due to SeValidateImageHeader not being modified?

If you can tell me how to reproduce this I will look into implementing a fix. (That part doesn't seem to be too hard, after taking a quick look at SeValidateImageHeader - mainly I just want to know what I'd be patching and why/when this patch is needed precisely).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feature New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@Mattiwatti @khang06