]> www.infradead.org Git - users/jedix/linux-maple.git/commit
projects / users / jedix / linux-maple.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 7592aea) | patch
MODSIGN: Support not importing certs from db
authorJosh Boyer <jwboyer@fedoraproject.org>
Tue, 19 May 2015 22:12:08 +0000 (15:12 -0700)
committerSantosh Shilimkar <santosh.shilimkar@oracle.com>
Mon, 10 Aug 2015 16:24:05 +0000 (09:24 -0700)
commitcc2d7d0b97a85e73ccaad4c238d2d989bdc8da4b
tree4f64d23f38bd0b3f34af50d57d74a99e6ff96ae6tree
parent7592aeaeb91372db794c782a2af931d2828594ebcommit | diff
MODSIGN: Support not importing certs from db

Orabug: 21539498

If a user tells shim to not use the certs/hashes in the UEFI db variable
for verification purposes, shim will set a UEFI variable called MokIgnoreDB.
Have the uefi import code look for this and not import things from the db
variable.

Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
Signed-off-by: Guangyu Sun <guangyu.sun@oracle.com>
Signed-off-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
kernel/modsign_uefi.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.