Re: [PATCH v2] efi: Set shim_lock_enabled even if validation is disabled

2023-11-29 Thread Daniel Kiper
On Tue, Nov 21, 2023 at 06:09:59PM +0100, Julian Andres Klode wrote: > If validation has been disabled via MokSbState, secure boot on the > firmware is still enabled, and the kernel fails to boot. > > This is a bit hacky, because shim_lock is not *fully* enabled, but > it triggers the right code

[PATCH v2] efi: Set shim_lock_enabled even if validation is disabled

2023-11-21 Thread Julian Andres Klode
If validation has been disabled via MokSbState, secure boot on the firmware is still enabled, and the kernel fails to boot. This is a bit hacky, because shim_lock is not *fully* enabled, but it triggers the right code paths. Ultimately, all this will be resolved by shim gaining it's own image