This is a tool for working with SBAT. It supports extracting
the .sbat section of a PE executable and either printing it directly,
or validating that it parses correctly and pretty-printing it.
Install with:
console
cargo install sbat-tool
console
$ sbat-tool validate /boot/efi/boot/bootx64.EFI
+-------------+-----+--------------------+---------+-------------+------------------------------------------------------+
| component | gen | vendor | package | version | url |
+-------------+-----+--------------------+---------+-------------+------------------------------------------------------+
| sbat | 1 | SBAT Version | sbat | 1 | https://github.com/rhboot/shim/blob/main/SBAT.md |
+-------------+-----+--------------------+---------+-------------+------------------------------------------------------+
| shim | 1 | UEFI shim | shim | 1 | https://github.com/rhboot/shim |
+-------------+-----+--------------------+---------+-------------+------------------------------------------------------+
| shim.redhat | 1 | The Fedora Project | shim | 15.4-5.fc33 | https://src.fedoraproject.org/rpms/shim-unsigned-x64 |
+-------------+-----+--------------------+---------+-------------+------------------------------------------------------+
Licensed under either of Apache License, Version 2.0 or MIT license at your option.
This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose.