lcp / mokutil

The utility to manipulate machine owner keys
GNU General Public License v3.0
67 stars 37 forks source link

mokutil: Add option to print the UEFI SBAT variable content #34

Closed martinezjavier closed 3 years ago

martinezjavier commented 3 years ago

This variable contains the descriptive form of all the components used by the operating systems that ship signed shim binaries. Along with a minimum generation number for each component. More information in can be found in the UEFI Secure Boot Advanced Targeting (SBAT) specification:

https://github.com/rhboot/shim/blob/main/SBAT.md

Since a SBAT variable contains a set of Comma Separated Values (CSV) UTF-8 encoded strings, the data could just be printed without the need to do any previous processing.

Signed-off-by: Javier Martinez Canillas javierm@redhat.com

lcp commented 3 years ago

Looks good to me.