From 321797142eb9491aaada80a9b514e6a4005d3eec Mon Sep 17 00:00:00 2001 From: Peter Jones Date: Mon, 28 Oct 2013 10:41:03 -0400 Subject: We should be checking both mok and the system's SB settings When we call hook_system_services(), we're currently only checking mok's setting. We should use secure_mode() instead so it'll check both. Signed-off-by: Peter Jones --- shim.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'shim.c') diff --git a/shim.c b/shim.c index 537177d0..9d0d8840 100644 --- a/shim.c +++ b/shim.c @@ -1718,7 +1718,7 @@ EFI_STATUS efi_main (EFI_HANDLE image_handle, EFI_SYSTEM_TABLE *passed_systab) /* * Tell the user that we're in insecure mode if necessary */ - if (insecure_mode) { + if (!secure_mode()) { Print(L"Booting in insecure mode\n"); uefi_call_wrapper(BS->Stall, 1, 2000000); } else { -- cgit v1.2.3