Also just check for access denied anyway.

Signed-off-by: Peter Jones <pjones@redhat.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/shim.c b/shim.c
index 4ab40806..1902da3d 100644
--- a/shim.c
+++ b/shim.c
@@ -1855,8 +1855,8 @@ EFI_STATUS init_grub(EFI_HANDLE image_handle)
 	int use_fb = should_use_fallback(image_handle);
 
 	efi_status = start_image(image_handle, use_fb ? FALLBACK :second_stage);
-
-	if (efi_status == EFI_SECURITY_VIOLATION) {
+	if (efi_status == EFI_SECURITY_VIOLATION ||
+	    efi_status == EFI_ACCESS_DENIED) {
 		efi_status = start_image(image_handle, MOK_MANAGER);
 		if (efi_status != EFI_SUCCESS) {
 			Print(L"start_image() returned %r\n", efi_status);