This is caused by Build-Profiles of nodoc and not properly supporting them.

sometimes the device is busy and will exceed the timer limit.

We publish the HSI spec at fwupd.github.io. We should make this
the first landing area for HSI content, going out to the wiki page
only as necessary.

According to Intel, EDX[bit 20] corresponds to IBT feature, *not* ECX.

Fixes half of https://github.com/fwupd/fwupd/issues/4960

There isn't any reason that we need to have a system advertising a
GUID with `main-system-firmware` in order to check that PCR0 reconstruction
matches what the TPM actually has.

Fixes: #4961

Use a hardcoded list of last-set dbx checksums to fix the reported version
when required.

Mario Limonciello authored Aug 25, 2022 and Mario Limonciello committed Aug 25, 2022

Turning on UEFI secure boot on Lenovo systems with 3rd party CA
turned off will cause a boot loop.

Mario Limonciello authored Aug 25, 2022 and Mario Limonciello committed Aug 25, 2022

After policy applies for the first time, you don't want to show
messaging to users that the policy can't apply the next time.

Mario Limonciello authored Aug 25, 2022 and Mario Limonciello committed Aug 25, 2022

This is probably going to grow in the future, so make it more efficient.

Mario Limonciello authored Aug 25, 2022 and Mario Limonciello committed Aug 25, 2022

This needs to be handled by the daemon so that all GUI clients will
be able to load translations as well.

The translations will be distributed with fwupd, and any GUI client
should look up the translations.

For future use.

The logic being that if we're emulating another system we're possibly
on a VM, and that's possibly going to report that it isn't a desktop.

I also think it makes sense to serialize out the FuSmbios object
to-and-from JSON, but that's a patch for another day.

Mario Limonciello authored Aug 24, 2022 and Mario Limonciello committed Aug 24, 2022

We don't want to be emitting errors in JSON mode, we should only use
return codes.

Mario Limonciello authored Aug 24, 2022 and Mario Limonciello committed Aug 24, 2022

A user can place a JSON file in /etc/fwupd/bios-settings.d/ with
the default desired policy for the machine.

fwupd will load this policy on startup to ensure BIOS settings
are set as desired by the system administrator.