diff options
| author | Steve McIntyre <steve@einval.com> | 2026-05-17 21:43:08 +0100 |
|---|---|---|
| committer | Steve McIntyre <steve@einval.com> | 2026-05-17 22:39:45 +0100 |
| commit | ccec529c3644e56a9889f013438d09a4c5d349d6 (patch) | |
| tree | 10feeb7f7530b54cd376fb7d9ee26e7e0ea47b12 /debian/control | |
| parent | 0140b59d00318019177364b0a56f180052394868 (diff) | |
| download | shim-signed-ccec529c3644e56a9889f013438d09a4c5d349d6.tar.gz shim-signed-ccec529c3644e56a9889f013438d09a4c5d349d6.zip | |
Tweak the boot check logic further: DBX sigs are fatal
If we have a sig from a key listed in DBX, don't just ignore
it. Firmware should refuse to boot things in a revoked chain so we
should fail here too.
Tweak the output too - switch from using a boolean $SAFE value to
using an error string in $SB_BOOT_ERROR so we can have more specific
errors printed.
Diffstat (limited to 'debian/control')
0 files changed, 0 insertions, 0 deletions