[PATCH v4 RESEND] efi: Do not import certificates from UEFI Secure Boot for T2 Macs

Aditya Garg gargaditya08 at live.com
Wed Apr 13 14:03:22 UTC 2022


> 
> Both the comment here and the patch description above still needs to be
> improved. Perhaps something along these lines.
Checkout v5
> 
> Secure boot on Apple Macs with a T2 Security chip cannot read either
> the EFI variables or the certificates stored in different db's (e.g.
> db, dbx, MokListXRT). Attempting to read them causes ... 
> 
> Avoid reading the EFI variables or the certificates stored in different
> dbs. As a result, without certificates secure boot signature
> verification fails.
> 
> thanks,
> 
> Mimi
> 
> 



More information about the Linux-security-module-archive mailing list