Messages in this thread | | | Date | Wed, 12 Dec 2018 05:49:00 +1100 (AEDT) | From | James Morris <> | Subject | Re: [PATCH v2 6/7] efi: Allow the "db" UEFI variable to be suppressed |
| |
On Sun, 9 Dec 2018, Nayna Jain wrote:
> From: Josh Boyer <jwboyer@fedoraproject.org> > > If a user tells shim to not use the certs/hashes in the UEFI db variable > for verification purposes, shim will set a UEFI variable called > MokIgnoreDB. Have the uefi import code look for this and ignore the db > variable if it is found. > > Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org> > Signed-off-by: David Howells <dhowells@redhat.com> > Acked-by: Nayna Jain <nayna@linux.ibm.com> > Acked-by: Serge Hallyn <serge@hallyn.com>
Reviewed-by: James Morris <james.morris@microsoft.com>
-- James Morris <jmorris@namei.org>
| |