rhboot / shim

UEFI shim loader
Other
848 stars 290 forks source link

Reference MokListRT instead of MokList #488

Closed esnowberg closed 2 years ago

esnowberg commented 2 years ago

When calling back into shim from grub, the MokListRT may contain additional entries not available in the original MokList, an example being the certs included via user_cert. Use the MokListRT instead when calling check_db_cert and check_db_hash.

Signed-off-by: Eric Snowberg eric.snowberg@oracle.com