[PATCH v4 RESEND] efi: Do not import certificates from UEFI Secure Boot for T2 Macs
Aditya Garg
gargaditya08 at live.com
Wed Apr 13 14:03:22 UTC 2022
>
> Both the comment here and the patch description above still needs to be
> improved. Perhaps something along these lines.
Checkout v5
>
> Secure boot on Apple Macs with a T2 Security chip cannot read either
> the EFI variables or the certificates stored in different db's (e.g.
> db, dbx, MokListXRT). Attempting to read them causes ...
>
> Avoid reading the EFI variables or the certificates stored in different
> dbs. As a result, without certificates secure boot signature
> verification fails.
>
> thanks,
>
> Mimi
>
>
More information about the Linux-security-module-archive
mailing list