Daniel Kiper 6425c12cd7 efi: Fallback to legacy mode if shim is loaded on x86 archs ...

The LoadImage() provided by the shim does not consult MOK when loading
an image. So, simply signature verification fails when it should not.
This means we cannot use Linux EFI stub to start the kernel when the
shim is loaded. We have to fallback to legacy mode on x86 architectures.
This is not possible on other architectures due to lack of legacy mode.

This is workaround which should disappear when the shim provides
LoadImage() which looks up MOK during signature verification.

On the occasion align constants in include/grub/efi/sb.h.

Signed-off-by: Daniel Kiper <daniel.kiper@oracle.com>
Reviewed-by: Ard Biesheuvel <ardb@kernel.org>

2023-07-03 14:29:22 +02:00

..

arm

efi: Remove arch specific image headers for RISC-V, ARM64 and ARM

2023-03-29 20:31:57 +02:00

arm64

efi: Remove arch specific image headers for RISC-V, ARM64 and ARM

2023-03-29 20:31:57 +02:00

efi

efi: Fallback to legacy mode if shim is loaded on x86 archs

2023-07-03 14:29:22 +02:00

emu

loader/emu/linux: Work around systemctl kexec returning

2023-03-29 20:35:05 +02:00

i386

guid: Make use of GUID printf format specifier

2023-06-01 11:45:00 +02:00

ia64/efi

guid: Unify GUID types

2023-06-01 11:45:00 +02:00

mips

loader: Drop argv[] argument in grub_initrd_load()

2022-08-19 23:55:49 +02:00

powerpc/ieee1275

loader: Drop argv[] argument in grub_initrd_load()

2022-08-19 23:55:49 +02:00

sparc64/ieee1275

loader: Drop argv[] argument in grub_initrd_load()

2022-08-19 23:55:49 +02:00

aout.c

Implement automatic module license checking according to new GNU

2011-04-11 23:01:51 +02:00

linux.c

loader/linux: Print debug message for each generated newc path generated

2023-07-03 14:02:33 +02:00

lzss.c

loader: Remove trailing whitespaces

2022-03-14 15:47:32 +01:00

macho32.c

* grub-core/loader/machoXX.c: Fix compilation on non-i386.

2013-12-17 22:44:46 +01:00

macho64.c

* grub-core/loader/machoXX.c: Fix compilation on non-i386.

2013-12-17 22:44:46 +01:00

macho.c

calloc: Use calloc() at most places

2020-07-29 16:55:47 +02:00

machoXX.c

Simplify few strings.

2013-05-07 11:44:15 +02:00

multiboot_elfxx.c

loader/multiboot_elfxx: Check program header offset doesn't exceed constraints

2023-05-25 16:48:00 +02:00

multiboot_mbi2.c

build: Fix -Werror=array-bounds array subscript 0 is outside array bounds

2022-04-20 18:27:52 +02:00

multiboot.c

loader: Remove trailing whitespaces

2022-03-14 15:47:32 +01:00

xnu_resume.c

relocator: Protect grub_relocator_alloc_chunk_align() max_addr against integer underflow

2020-07-29 16:55:48 +02:00

xnu.c

loader: Remove trailing whitespaces

2022-03-14 15:47:32 +01:00