EFI_SECRET: ALLOW READING EFI CONFIDENTIAL COMPUTING (COCO) SECRET AREA(9)

✨ NAME ✨

okay bestie, this is the efi_secret page from the Kernel API Manual, section 9, and the manual-name moment is literally: Allow reading EFI confidential computing (coco) secret area via securityfs interface. 💖

🦋 DESCRIPTION 🦋

When the module is loaded (and securityfs is mounted, typically under /sys/kernel/security), a "secrets/coco" directory is created in securityfs. 🎀

Inside it, a file is created for each secret entry. The name of each such file is the GUID of the secret entry, and its content is the secret data. 🌸

💅 SEE ALSO 💅

• Kernel file ./drivers/virt/coco/efi_secret/efi_secret.c — the kernel file ref, iykyk. 👑
• struct secret_header(9) — struct reference, no cap. 🦋
• struct secret_entry(9) — the other struct reference, periodt. ⭐

That’s the whole read, bestie: source/version ./drivers/virt/coco/efi_secret, dated October 2026, with footer title energy efi_secret:... secret area(9). 🫶✨