]> git.ipfire.org Git - thirdparty/grub.git/commit
efi: Lockdown the GRUB when the UEFI Secure Boot is enabled
authorJavier Martinez Canillas <javierm@redhat.com>
Mon, 28 Sep 2020 18:08:29 +0000 (20:08 +0200)
committerDaniel Kiper <daniel.kiper@oracle.com>
Tue, 2 Mar 2021 14:54:15 +0000 (15:54 +0100)
commit98b00a403cbf2ba6833d1ac0499871b27a08eb77
tree2a2dd86a8e37a93b6bd97649d7475b25941d4b60
parentd90367471779c240e002e62edfb6b31fc85b4908
efi: Lockdown the GRUB when the UEFI Secure Boot is enabled

If the UEFI Secure Boot is enabled then the GRUB must be locked down
to prevent executing code that can potentially be used to subvert its
verification mechanisms.

Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
grub-core/kern/efi/init.c