grub2/debian/patches/linuxefi_require_shim.patch
Colin Watson 2933c9f7a1 Import replacement CRC operations from libgcrypt
Repack upstream tarball without grub-core/lib/libgcrypt*/cipher/crc.c,
and provide a replacement implementation backported from more recent
versions of libgcrypt.

Closes: #745409
2018-02-16 11:08:25 +00:00

29 lines
909 B
Diff

From 20df4d793336859f781fe5f3636214eb2dcdcf64 Mon Sep 17 00:00:00 2001
From: Colin Watson <cjwatson@ubuntu.com>
Date: Mon, 13 Jan 2014 12:13:19 +0000
Subject: Make linuxefi refuse to boot without shim
This is only intended as a temporary measure.
Forwarded: not-needed
Last-Update: 2013-01-29
Patch-Name: linuxefi_require_shim.patch
---
grub-core/loader/i386/efi/linux.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/grub-core/loader/i386/efi/linux.c b/grub-core/loader/i386/efi/linux.c
index 1995a5089..ff293166c 100644
--- a/grub-core/loader/i386/efi/linux.c
+++ b/grub-core/loader/i386/efi/linux.c
@@ -63,7 +63,7 @@ grub_linuxefi_secure_validate (void *data, grub_uint32_t size)
if (!shim_lock)
{
grub_dprintf ("linuxefi", "shim not available\n");
- return 1;
+ return 0;
}
grub_dprintf ("linuxefi", "Asking shim to verify kernel signature\n");