summaryrefslogtreecommitdiff
path: root/shim.c
diff options
context:
space:
mode:
authorPeter Jones <pjones@redhat.com>2013-10-28 10:41:03 -0400
committerPeter Jones <pjones@redhat.com>2013-10-28 10:41:03 -0400
commit83b3a7cf6d4d4e91579864cfc75dadf2b7304da9 (patch)
tree39e4cd2da4d5ac8cd0d73a549874e25f7e234a90 /shim.c
parent56fb385a172890cf4c20c9daa89bb6cccf9c1b4e (diff)
downloadefi-boot-shim-83b3a7cf6d4d4e91579864cfc75dadf2b7304da9.tar.gz
efi-boot-shim-83b3a7cf6d4d4e91579864cfc75dadf2b7304da9.zip
We should be checking both mok and the system's SB settings
When we call hook_system_services(), we're currently only checking mok's setting. We should use secure_mode() instead so it'll check both. Signed-off-by: Peter Jones <pjones@redhat.com>
Diffstat (limited to 'shim.c')
-rw-r--r--shim.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/shim.c b/shim.c
index 537177d0..9d0d8840 100644
--- a/shim.c
+++ b/shim.c
@@ -1718,7 +1718,7 @@ EFI_STATUS efi_main (EFI_HANDLE image_handle, EFI_SYSTEM_TABLE *passed_systab)
/*
* Tell the user that we're in insecure mode if necessary
*/
- if (insecure_mode) {
+ if (!secure_mode()) {
Print(L"Booting in insecure mode\n");
uefi_call_wrapper(BS->Stall, 1, 2000000);
} else {