mirror of
https://git.savannah.gnu.org/git/grub.git
synced 2026-10-25 08:39:28 +00:00
efi/sb: Add support for the shim loader protocol
Use loader protocol for image verification where available, otherwise fall back to the old shim lock protocol. Signed-off-by: Mate Kukri <mate.kukri@canonical.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
This commit is contained in:
1 parent
70897d3d3e
commit
ed7e053a36
4 files changed
+42
-30
No files matched your search
@@ -464,10 +464,10 @@ grub_cmd_linux (grub_command_t cmd __attribute__ ((unused)),
|
||||
|
||||
grub_dl_ref (my_mod);
|
||||
|
||||
if (grub_is_shim_lock_enabled () == true)
|
||||
if (grub_is_using_legacy_shim_lock_protocol () == true)
|
||||
{
|
||||
#if defined(__i386__) || defined(__x86_64__)
|
||||
grub_dprintf ("linux", "shim_lock enabled, falling back to legacy Linux kernel loader\n");
|
||||
grub_dprintf ("linux", "using legacy shim_lock protocol, falling back to legacy Linux kernel loader\n");
|
||||
|
||||
err = grub_cmd_linux_x86_legacy (cmd, argc, argv);
|
||||
|
||||
@@ -476,7 +476,7 @@ grub_cmd_linux (grub_command_t cmd __attribute__ ((unused)),
|
||||
else
|
||||
goto fail;
|
||||
#else
|
||||
grub_dprintf ("linux", "shim_lock enabled, trying Linux kernel EFI stub loader\n");
|
||||
grub_dprintf ("linux", "using legacy shim_lock protocol on non-x86, only db verifiable kernels will work\n");
|
||||
#endif
|
||||
}
|
||||
|
||||
|
||||
Reference in new issue
Block a user