[PATCH v4 0/4] Add whitelisting support for load_env

[Jon McCune]

These patches add support to load_env and save_env to work nicely
in concert with check_signatures=enforce.  This represents an
evolution from the design in my email to grub-devel entitled
"Proposal to enable savedefault, one-shot reboot, etc with
check_signatures=enforce".  In particular, no new commands are added.
Instead, the behavior of load_env is modified based on the presence
of a whitelist of environment variables to be updated from an
untrusted grubenv-style file.

Some additional work is done to make this support usable:
A {-k, --pubkey} option is added to:
grub-install, grub-mkrescue, grub-mkstandalone, grub-mknetdir.
See the individual patch descriptions for more specifics.

Jon McCune (4):
  style: indent --no-tabs --gnu-style grub-core/commands/loadenv.c
  load_env support for whitelisting which variables are read from an env
    file, even if check_signatures=enforce
  save_env should work, even if check_signatures=enforce
  Add (multiple) -k, --pubkey=FILE support to installation commands.

 grub-core/commands/loadenv.c | 139 ++++++++++++++++++++++++++++---------------
 grub-core/lib/envblk.c       |  20 ++++++-
 include/grub/lib/envblk.h    |   8 +++
 util/grub-editenv.c          |   2 +-
 util/grub-install.in         |   8 +--
 util/grub-install_header     |  17 ++++++
 util/grub-mknetdir.in        |   2 +-
 util/grub-mkrescue.in        |  12 ++--
 util/grub-mkstandalone.in    |   2 +-
 9 files changed, 146 insertions(+), 64 deletions(-)

-- 
1.8.4