Repo needs a release that meets UEFI 3rd Party CA Section Alignment Requirements

[makubacki]

Platforms are now requiring that section alignment by page aligned (4k) to meeting UEFI CA Memory Mitigation Requirements.

The latest release from this repo (v3.6.8.1) does not meet these requirements. A dump of the section alignment from the Python.efi binary in that release:

---

Building against the most recent edk2 should automatically use the updated linker flags so the image have 4k section alignment.

In addition, the build flow should set IMAGE_DLLCHARACTERISTICS_NX_COMPAT in DLL Characteristics as described in the document linked above.

[makubacki]

@mdkinney, @jpshivakavi, and @bexcran - I see you're all codeowners. Can you please assign an owner?

[makubacki]

@jpshivakavi, we have some testing blocked due to this issue. Can you please give an ETA for the release?

[jpshivakavi]

You can build your own Python interpreter for UEFI using the source code available in this repo.

[makubacki]

The upstream chipsec version needs to have these changes. We as TianoCore should also have binaries published that meet UEFI 3rd Party CA requirements.

An ETA is needed for us to do so.

[makubacki]

@jpshivakavi, does the issue need a different owner? The request is essentially to just perform a release against current edk2 code.

[jpshivakavi]

I will generate and give the latest build, you can verify it once.
Then I will make it as official release.

[jpshivakavi]

@makubacki https://github.com/tianocore/edk2-libc/actions/runs/24379726550/artifacts/6419893815

Please access the latest build from the above location and let me know if this is fine.

[jpshivakavi]

@makubacki I have verified the image using dumpbin application and could see that the section alignment value has changed to 1000 now.

[makubacki]

@jpshivakavi, sorry I missed your other message. This looks good - 4k section alignment and NX compat bit set. Thanks!

[jpshivakavi]

@makubacki
Thanks for checking and reverting back.
The Release of the version 3.6.8.2 from the latest build has been made. Currently it has only VS2022 build artifacts.
https://github.com/tianocore/edk2-libc/releases/tag/v3.6.8.2

I will closing this issue.