SQLite format 3 @ .v�
� �
Q � � � �%##�tablehsi_historyhsi_historyCREATE TABLE hsi_history (timestamp TIMESTAMP DEFAULT CURRENT_TIMESTAMP,hsi_details TEXT DEFAULT NULL,hsi_score TEXT DEFAULT NULL)Y--gtableblocked_firmwareblocked_firmwareCREATE TABLE blocked_firmware (checksum TEXT)\//itableapproved_firmwareapproved_firmwareCREATE TABLE approved_firmware (checksum TEXT)�,�/tablehistoryhistoryCREATE TABLE history (device_id TEXT,update_state INTEGER DEFAULT 0,update_error TEXT,filename TEXT,display_name TEXT,plugin TEXT,device_created INTEGER DEFAULT 0,device_modified INTEGER DEFAULT 0,checksum TEXT DEFAULT NULL,flags INTEGER DEFAULT 0,metadata TEXT DEFAULT NULL,guid_default TEXT DEFAULT NULL,version_old TEXT,version_new TEXT,checksum_device TEXT DEFAULT NULL,protocol TEXT DEFAULT NULL,release_id TEXT DEFAULT NULL,appstream_id TEXT DEFAULT NULL,version_format INTEGER DEFAULT 0,install_duration INTEGER DEFAULT 0)~�WtableschemaschemaCREATE TABLE schema (created timestamp TIMESTAMP DEFAULT CURRENT_TIMESTAMP,version INTEGER DEFAULT 0)
� � 32025-08-03 15:25:55
�
� �K3��Q-2025-08-03 15:25:57{
"SecurityAttributes" : [
{
"AppstreamId" : "org.fwupd.hsi.Fwupd.Plugins",
"HsiLevel" : 0,
"HsiResult" : "not-tainted",
"HsiResultSuccess" : "not-tainted",
"Name" : "fwupd plugins",
"Summary" : "Firmware Updater Verification",
"Description" : "Firmware Updater Verification checks that software used for updating has not been tampered with.",
"Plugin" : "core",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.Fwupd.Plugins",
"Flags" : [
"success",
"runtime-issue"
]
},
{
"AppstreamId" : "org.fwupd.hsi.Kernel.Tainted",
"HsiLevel" : 0,
"HsiResult" : "not-tainted",
"HsiResultSuccess" : "not-tainted",
"Name" : "Linux kernel",
"Summary" : "Linux Kernel Verification",
"Description" : "Linux Kernel Verification makes sure that critical system software has not been tampered with. Using device drivers which are not provided with the system can prevent this security feature from working correctly.",
"Plugin" : "linux_tainted",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.Kernel.Tainted",
"Flags" : [
"success",
"runtime-issue"
]
},
{
"AppstreamId" : "org.fwupd.hsi.Kernel.Lockdown",
"HsiLevel" : 0,
"HsiResult" : "not-enabled",
"HsiResultSuccess" : "enabled",
"Name" : "Linux kernel lockdown",
"Summary" : "Linux Kernel Lockdown",
"Description" : "Linux Kernel Lockdown mode prevents administrator (root) accounts from accessing and changing critical parts of system software.",
"Plugin" : "linux_lockdown",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.Kernel.Lockdown",
"Flags" : [
"runtime-issue",
"action-config-os"
]
},
{
"AppstreamId" : "org.fwupd.hsi.Kernel.Swap",
"HsiLevel" : 0,
"HsiResult" : "not-encrypted",
"HsiResultSuccess" : "encrypted",
"Name" : "Linux swap",
"Summary" : "Linux Swap",
"Description" : "Linux Kernel Swap temporarily saves information to disk as you work. If the information is not protected, it could be accessed by someone if they obtained the disk.",
"Plugin" : "linux_swap",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.Kernel.Swap",
"Flags" : [
"runtime-issue",
"action-config-os"
]
},
{
"AppstreamId" : "org.fwupd.hsi.Uefi.SecureBoot",
"HsiLevel" : 0,
"HsiResult" : "not-enabled",
"HsiResultSuccess" : "enabled",
"Name" : "UEFI secure boot",
"Summary" : "UEFI Secure Boot",
"Description" : "UEFI Secure Boot prevents malicious software from being loaded when the device starts.",
"Plugin" : "bios",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.Uefi.SecureBoot",
"Flags" : [
"runtime-issue",
"action-config-fw"
]
},
{
"AppstreamId" : "org.fwupd.hsi.Uefi.BootserviceVars",
"HsiLevel" : 1,
"HsiResult" : "locked",
"HsiResultSuccess" : "locked",
"Name" : "UEFI bootservice variables",
"Summary" : "UEFI Bootservice Variables",
"Description" : "UEFI boot service variables should not be readable from runtime mode.",
"Plugin" : "uefi_capsule",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.Uefi.BootserviceVars",
"Flags" : [
"success"
]
},
{
"AppstreamId" : "org.fwupd.hsi.SupportedCpu",
"HsiLevel" : 1,
"HsiResultSuccess" : "valid",
"Name" : "Supported CPU",
"Summary" : "Processor Security Checks",
"Description" : "Each system should have tests to ensure firmware security.",
"Plugin" : "core",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.SupportedCpu",
"Flags" : [
"missing-data",
"action-contact-oem"
]
},
{
"AppstreamId" : "org.fwupd.hsi.Tpm.Version20",
"HsiLevel" : 1,
"HsiResult" : "not-found",
"HsiResultSuccess" : "found",
"Name" : "TPM v2.0",
"Summary" : "TPM v2.0",
"Description" : "TPM (Trusted Platform Module) is a computer chip that detects when hardware components have been tampered with.",
"Plugin" : "tpm",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.Tpm.Version20"
},
{
"AppstreamId" : "org.fwupd.hsi.Iommu",
"HsiLevel" : 2,
"HsiResult" : "not-found",
"HsiResultSuccess" : "enabled",
"Na me" : "IOMMU",
"Summary" : "IOMMU Protection",
"Description" : "IOMMU Protection prevents connected devices from accessing unauthorized parts of system memory.",
"Plugin" : "iommu",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.Iommu",
"Flags" : [
"action-contact-oem",
"action-config-fw",
"action-config-os"
]
},
{
"AppstreamId" : "org.fwupd.hsi.IntelCet.Enabled",
"HsiLevel" : 3,
"HsiResult" : "not-supported",
"HsiResultSuccess" : "supported",
"Name" : "CET Platform",
"Summary" : "Control-flow Enforcement Technology",
"Description" : "Control-Flow Enforcement Technology detects and prevents certain methods for running malicious software on the device.",
"Plugin" : "cpu",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.IntelCet.Enabled",
"Guid" : [
"b590a5ce-90c8-54da-8329-dae581379fa6",
"00422192-7b45-53d0-8a5a-1abb7c83e552"
]
},
{
"AppstreamId" : "org.fwupd.hsi.PrebootDma",
"HsiLevel" : 3,
"HsiResult" : "not-valid",
"HsiResultSuccess" : "enabled",
"Name" : "Pre-boot DMA protection",
"Summary" : "Pre-boot DMA Protection",
"Description" : "Pre-boot DMA protection prevents devices from accessing system memory after being connected to the computer.",
"Plugin" : "acpi_ivrs",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.PrebootDma"
},
{
"AppstreamId" : "org.fwupd.hsi.SuspendToIdle",
"HsiLevel" : 3,
"HsiResult" : "not-enabled",
"HsiResultSuccess" : "enabled",
"Name" : "Suspend-to-idle",
"Summary" : "Suspend To Idle",
"Description" : "Suspend to Idle allows the device to quickly go to sleep in order to save power. While the device has been suspended, its memory could be physically removed and its information accessed.",
"Plugin" : "acpi_facp",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.SuspendToIdle",
"Flags" : [
"action-config-fw",
"action-config-os"
]
},
{
"AppstreamId" : "org.fwupd.hsi.SuspendToRam",
"HsiLevel" : 3,
"HsiResult" : "enabled",
"HsiResultSuccess" : "not-enabled",
"Name" : "Suspend-to-ram",
"Summary" : "Suspend To RAM",
"Description" : "Suspend to RAM allows the device to quickly go to sleep in order to save power. While the device has been suspended, its memory could be physically removed and its information accessed.",
"Plugin" : "linux_sleep",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.SuspendToRam",
"Flags" : [
"action-config-fw",
"action-config-os"
]
},
{
"AppstreamId" : "org.fwupd.hsi.EncryptedRam",
"HsiLevel" : 4,
"HsiResult" : "not-supported",
"HsiResultSuccess" : "encrypted",
"Name" : "Encrypted RAM",
"Summary" : "Encrypted RAM",
"Description" : "Encrypted RAM makes it impossible for information that is stored in device memory to be read if the memory chip is removed and accessed.",
"Plugin" : "msr",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.EncryptedRam",
"Guid" : [
"b590a5ce-90c8-54da-8329-dae581379fa6",
"00422192-7b45-53d0-8a5a-1abb7c83e552"
]
},
{
"AppstreamId" : "org.fwupd.hsi.IntelSmap",
"HsiLevel" : 4,
"HsiResult" : "not-supported",
"HsiResultSuccess" : "enabled",
"Name" : "SMAP",
"Summary" : "Supervisor Mode Access Prevention",
"Description" : "Supervisor Mode Access Prevention ensures critical parts of device memory are not accessed by less secure programs.",
"Plugin" : "cpu",
"Uri" : "https://fwupd.github.io/libfwupdplugin/hsi.html#org.fwupd.hsi.IntelSmap",
"Guid" : [
"b590a5ce-90c8-54da-8329-dae581379fa6",
"00422192-7b45-53d0-8a5a-1abb7c83e552"
]
}
]
}HSI:0! (v1.9.27)