summaryrefslogtreecommitdiff
path: root/MokVars.txt
diff options
context:
space:
mode:
authorSteve McIntyre <steve@einval.com>2024-02-17 17:35:37 +0000
committerSteve McIntyre <steve@einval.com>2024-02-17 17:35:37 +0000
commita075e58606b9affb6dfb176c71caab816737a981 (patch)
treecb517fcf059f8d9d9dd7f6860a2d77d75ddc4142 /MokVars.txt
parent2dd2f7600d41253fe621b8d040ab57f0c202d71b (diff)
downloadefi-boot-shim-upstream.tar.gz
efi-boot-shim-upstream.zip
New upstream version 15.8upstream/15.8upstream
Diffstat (limited to 'MokVars.txt')
-rw-r--r--MokVars.txt5
1 files changed, 5 insertions, 0 deletions
diff --git a/MokVars.txt b/MokVars.txt
index cdfec2c8..baf8db9a 100644
--- a/MokVars.txt
+++ b/MokVars.txt
@@ -53,6 +53,11 @@ The hash will be regenerated by MokManager after the user is requested
to enter their password to confirm enrolment of the keys. If the hash
matches MokAuth, the user will be prompted to enrol the keys. BS,RT,NV
+ShimRetainProtocol: UINT8, read by Shim before uninstalling protocol.
+If set to non-zero, Shim will keep the protocol in place. It can be
+used by second stages to ensure the protocol is still available for
+later stages, and can thus be used to verify additional PE files. BS,RT.
+
State variables:
MokList: A list of authorized keys and hashes. An EFI_SIGNATURE_LIST