From: Ingo Breßler Date: Mon, 22 Dec 2025 10:11:05 +0000 (+0100) Subject: kern/efi/sb: Enable loading GRUB_FILE_TYPE_CRYPTODISK_ENCRYPTION_KEY and GRUB_FILE_TY... X-Git-Tag: grub-2.14~9 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=18f08826f98a58f214b622fbd299bf56389cc94d;p=thirdparty%2Fgrub.git kern/efi/sb: Enable loading GRUB_FILE_TYPE_CRYPTODISK_ENCRYPTION_KEY and GRUB_FILE_TYPE_CRYPTODISK_DETACHED_HEADER ... file types when UEFI Secure Boot is enabled. Otherwise it is not possible to load cryptodisk encryption key or detached header. Fixes: https://savannah.gnu.org/bugs/?65889 Signed-off-by: Ingo Breßler Signed-off-by: Daniel Kiper Reviewed-by: Alec Brown --- diff --git a/grub-core/kern/efi/sb.c b/grub-core/kern/efi/sb.c index 4409e03c5..b2bf38a54 100644 --- a/grub-core/kern/efi/sb.c +++ b/grub-core/kern/efi/sb.c @@ -152,6 +152,8 @@ shim_lock_verifier_init (grub_file_t io __attribute__ ((unused)), case GRUB_FILE_TYPE_TESTLOAD: case GRUB_FILE_TYPE_GET_SIZE: case GRUB_FILE_TYPE_ZFS_ENCRYPTION_KEY: + case GRUB_FILE_TYPE_CRYPTODISK_ENCRYPTION_KEY: + case GRUB_FILE_TYPE_CRYPTODISK_DETACHED_HEADER: case GRUB_FILE_TYPE_CAT: case GRUB_FILE_TYPE_HEXCAT: case GRUB_FILE_TYPE_CMP: