vaseboot

Commit Graph

Author	SHA1	Message	Date
Matthew Garrett	f4d00290ed	Fail validation if we can't find shim and Secure Boot is enabled If grub is signed with a key that's in the trusted EFI keyring, an attacker can point a boot entry at grub rather than at shim and grub will fail to locate the shim verification protocol. This would then allow booting an arbitrary kernel image. Fail validation if Secure Boot is enabled and we can't find the shim protocol in order to prevent this.	2018-03-29 22:18:53 -04:00
Matthew Garrett	23589dc78b	Add support for linuxefi	2018-03-29 22:18:52 -04:00

Author

SHA1

Message

Date

Matthew Garrett

f4d00290ed

Fail validation if we can't find shim and Secure Boot is enabled

If grub is signed with a key that's in the trusted EFI keyring, an attacker
can point a boot entry at grub rather than at shim and grub will fail to
locate the shim verification protocol. This would then allow booting an
arbitrary kernel image. Fail validation if Secure Boot is enabled and we
can't find the shim protocol in order to prevent this.

2018-03-29 22:18:53 -04:00

Matthew Garrett

23589dc78b

Add support for linuxefi

2018-03-29 22:18:52 -04:00

2 Commits