]> git.ipfire.org Git - thirdparty/systemd.git/commit
efi: set EFIVAR to stop Shim from uninstalling its protocol
authorLuca Boccassi <bluca@debian.org>
Thu, 11 May 2023 23:51:19 +0000 (00:51 +0100)
committerLuca Boccassi <bluca@debian.org>
Wed, 24 May 2023 09:26:41 +0000 (10:26 +0100)
commite1f1b5fc62f721a3a4c14d97ad01447b2ac07d6d
tree6d132f2051e6df7ea6396b67c49a61213d89f740
parente715d82de6694d82a17921b5ccbcf47398604068
efi: set EFIVAR to stop Shim from uninstalling its protocol

We'll use it from the stub to validate files. Requires Shim 5.18.
By default, Shim uninstalls its protocol when calling StartImage(),
so when loading systemd-boot via shim and then loading an UKI, the
UKI's sd-stub will no longer be able to use the shim verification
protocol by default.
src/boot/efi/boot.c
src/boot/efi/shim.c
src/boot/efi/shim.h