summaryrefslogtreecommitdiff
path: root/shim.c
diff options
context:
space:
mode:
authorPeter Jones <pjones@redhat.com>2013-10-28 10:41:03 -0400
committerPeter Jones <pjones@redhat.com>2013-10-28 10:41:03 -0400
commit321797142eb9491aaada80a9b514e6a4005d3eec (patch)
tree39e4cd2da4d5ac8cd0d73a549874e25f7e234a90 /shim.c
parentcf718e194040b4fb0937d5b926545367118b6041 (diff)
downloadefi-boot-shim-321797142eb9491aaada80a9b514e6a4005d3eec.tar.gz
efi-boot-shim-321797142eb9491aaada80a9b514e6a4005d3eec.zip
We should be checking both mok and the system's SB settings
When we call hook_system_services(), we're currently only checking mok's setting. We should use secure_mode() instead so it'll check both. Signed-off-by: Peter Jones <pjones@redhat.com>
Diffstat (limited to 'shim.c')
-rw-r--r--shim.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/shim.c b/shim.c
index 537177d0..9d0d8840 100644
--- a/shim.c
+++ b/shim.c
@@ -1718,7 +1718,7 @@ EFI_STATUS efi_main (EFI_HANDLE image_handle, EFI_SYSTEM_TABLE *passed_systab)
/*
* Tell the user that we're in insecure mode if necessary
*/
- if (insecure_mode) {
+ if (!secure_mode()) {
Print(L"Booting in insecure mode\n");
uefi_call_wrapper(BS->Stall, 1, 2000000);
} else {