diff options
| author | Peter Jones <pjones@redhat.com> | 2021-03-11 16:44:46 -0500 |
|---|---|---|
| committer | Javier Martinez Canillas <javier@dowhile0.org> | 2021-03-12 10:15:01 +0100 |
| commit | 076de43a0f871d9e6b6d48e013f01616e4fb1eea (patch) | |
| tree | c471e199cb69e6e66422f56427b589e916dae832 /mok.c | |
| parent | b5a7c8ce6012ec8d5f9f2515537f918ef4ca9358 (diff) | |
| download | efi-boot-shim-076de43a0f871d9e6b6d48e013f01616e4fb1eea.tar.gz efi-boot-shim-076de43a0f871d9e6b6d48e013f01616e4fb1eea.zip | |
Make ENABLE_SHIM_DEVEL work better.
This fixes ENABLE_SHIM_DEVEL to actually work, and also makes our "goto
die" failure behavior change (to wait considerably longer) based on it.
Signed-off-by: Peter Jones <pjones@redhat.com>
Diffstat (limited to 'mok.c')
| -rw-r--r-- | mok.c | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -236,7 +236,11 @@ struct mok_state_variable mok_state_variables[] = { * we're enforcing that SBAT can't have an RT flag here because * there's no way to tell whether it's an authenticated variable. */ +#if !defined(ENABLE_SHIM_DEVEL) .no_attr = EFI_VARIABLE_RUNTIME_ACCESS, +#else + .no_attr = 0, +#endif .flags = MOK_MIRROR_DELETE_FIRST | MOK_VARIABLE_MEASURE, .pcr = 7, |