Fall back to MokManager if grub failed to validate

If we can't verify grub, fall back to MokManager. This permits shipping a
copy of shim and MokManager without distributing a key, letting
distributions provide their own for user installation.
This commit is contained in:
Matthew Garrett 2012-10-06 17:20:30 -04:00
parent e4889c525b
commit 32b08c73d8

6
shim.c
View File

@ -1019,8 +1019,10 @@ EFI_STATUS init_grub(EFI_HANDLE image_handle)
efi_status = start_image(image_handle, SECOND_STAGE);
if (efi_status != EFI_SUCCESS) {
Print(L"Failed to start grub\n");
goto done;
if (efi_status == EFI_ACCESS_DENIED)
efi_status = start_image(image_handle, MOK_MANAGER);
else
Print(L"Failed to start grub\n");
}
done: