lkml.org 
[lkml]   [2022]   [Feb]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH] efi: Do not import certificates from UEFI Secure Boot for T2 Macs
Date

>
> The LOAD_UEFI_KEYS code isn't doing anything special here - it's just
> trying to read some variables. If we simply disable that then the
> expectation would be that reading the same variables from userland would
> trigger the same failure. So the question is which of the variables that
> LOAD_UEFI_KEYS accesses is triggering the failure, and what's special
> about that? If it's a specific variable GUID or name that's failing, we
> should block that on Apple hardware in order to avoid issues caused by
> userland performing equivalent accesses.

The size log seems to be extra when crash occurs

integrity: Couldn't get size: 0x8000000000000015
integrity: MODSIGN: Couldn't get UEFI db list
efi: EFI Runtime Services are disabled!
integrity: Couldn't get size: 0x8000000000000015
integrity: Couldn't get UEFI dbx list
integrity: Couldn't get size: 0x8000000000000015
integrity: Couldn't get mokx list
integrity: Couldn't get size: 0x80000000

\
 
 \ /
  Last update: 2022-02-10 06:55    [W:0.116 / U:0.184 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site