Import chipsec tool and make it work in the recovery shell
Open
Nobody has claimed this yet.
enhancement / improvement
initrd
security
- Dominant language
- Makefile
- Stars
- 1.6k
- Forks
- 211
- Avg merge
- 4d 21h
- Merged PRs (30d)
- 6
Description
We should run chipsec as part of the recovery shell to ensure that the vulnerabilities disclosed in the REcon MTL presentation are not present in the Heads firmware. coreboot mailinglist discussion: https://mail.coreboot.org/pipermail/coreboot/2017-July/084766.html
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the recovery shell and Heads firmware integration points, then read the linked coreboot mailing-list discussion and chipsec repository. Define how chipsec should be imported and invoked in the recovery shell; done means it runs there and checks for the vulnerabilities described in the REcon MTL presentation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- shell
- Domain
- operating-systems, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100