Thread (23 messages) 23 messages, 4 authors, 2018-12-13

Re: [PATCH v2 6/7] efi: Allow the "db" UEFI variable to be suppressed

From: James Morris <jmorris@namei.org>
Date: 2018-12-11 18:49:31
Also in: kexec, keyrings, linux-efi, linux-integrity, lkml 

On Sun, 9 Dec 2018, Nayna Jain wrote:

From: Josh Boyer <redacted>

If a user tells shim to not use the certs/hashes in the UEFI db variable
for verification purposes, shim will set a UEFI variable called
MokIgnoreDB. Have the uefi import code look for this and ignore the db
variable if it is found.

Signed-off-by: Josh Boyer <redacted>
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Nayna Jain <nayna@linux.ibm.com>
Acked-by: Serge Hallyn <serge@hallyn.com>

Reviewed-by: James Morris <redacted>


-- 
James Morris
[off-list ref]
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help