In order to manipulate the efi variables which represent the signing
databases we need an updates efivars filesystem. This filesystem
allows manipulation of larger efi variables (those >1KB) which was not
This new filesystem is separate to the existing implementation and
therefore low risk. This is needed to handle signed/secureboot installs
and therefore would be preferably in the kernel at release.
Proposing for Quantal.
Jeremy Kerr (1):
efi: Handle deletions and size changes in efivarfs_write_file