Merge branch 'topic/uek-4.1/secureboot' of git://ca-git.us.oracle.com/linux-uek into uek/uek-4.1
* 'topic/uek-4.1/secureboot' of git://ca-git.us.oracle.com/linux-uek:
efi: Disable secure boot if shim is in insecure mode
hibernate: Disable in a signed modules environment
efi: Add EFI_SECURE_BOOT bit
Add option to automatically set securelevel when in Secure Boot mode
asus-wmi: Restrict debugfs interface when securelevel is set
x86: Restrict MSR access when securelevel is set
uswsusp: Disable when securelevel is set
kexec: Disable at runtime if securelevel has been set.
acpi: Ignore acpi_rsdp kernel parameter when securelevel is set
acpi: Limit access to custom_method if securelevel is set
Restrict /dev/mem and /dev/kmem when securelevel is set.
x86: Lock down IO port access when securelevel is enabled
PCI: Lock down BAR access when securelevel is enabled
Enforce module signatures when securelevel is greater than 0
Add BSD-style securelevel support
MODSIGN: Support not importing certs from db
MODSIGN: Import certificates from UEFI Secure Boot
MODSIGN: Add module certificate blacklist keyring
Add an EFI signature blob parser and key loader.
Add EFI signature data types