Struct RevocationSbat 

pub struct RevocationSbat(/* private fields */);

Revocation SBAT data.

Typically this data comes from a UEFI variable such as SbatLevel.

Implementations

impl RevocationSbat

pub fn parse(input: &[u8]) -> Result<&Self, ParseError>

Parse SBAT data from raw CSV. This data typically comes from a UEFI variable or a RevocationSection. Each record is parsed as a Component.

Any data past the first null in input is ignored. A null byte is not required to be present.

pub fn as_csv(&self) -> &AsciiStr

Get the underlying ASCII CSV string.

pub fn date(&self) -> Option<&AsciiStr>

Date of the revocation data, used as a comparable version. This is optional and may not be present. Versions should be compared lexicographically.

pub fn revoked_components(&self) -> RevokedComponents<'_>

Get an iterator over the entries.

pub fn is_component_revoked(&self, input: &Component<'_>) -> bool

Check if the input Component is revoked.

The input is checked against each revocation component. If the names match, and if the input’s version is less than the version in the corresponding revocation component, the input is considered revoked and the image will not pass validation. If the input is not in the revocation list then it is implicitly allowed.

pub fn validate_image<'i>( &self, image_sbat: &'i ImageSbat, ) -> ValidationResult<'i>

Check if any component in image_sbat is revoked.

Each component in the image metadata is checked against the revocation entries. If the name matches, and if the component’s version is less than the version in the corresponding revocation entry, the component is considered revoked and the image will not pass validation. If a component is not in the revocation list then it is implicitly allowed.

Trait Implementations

impl Debug for RevocationSbat

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Ord for RevocationSbat

fn cmp(&self, other: &RevocationSbat) -> Ordering

This method returns an Ordering between self and other.

impl PartialEq<&RevocationSbat> for RevocationSbatOwned

Available on crate feature alloc only.

fn eq(&self, other: &&RevocationSbat) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialEq<RevocationSbatOwned> for &RevocationSbat

Available on crate feature alloc only.

fn eq(&self, other: &RevocationSbatOwned) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialEq for RevocationSbat

fn eq(&self, other: &RevocationSbat) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for RevocationSbat

fn partial_cmp(&self, other: &RevocationSbat) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Eq for RevocationSbat

impl StructuralPartialEq for RevocationSbat