uefi-ref/edk2
1
0
Fork 0
mirror of https://github.com/tianocore/edk2 synced 2026-08-27 00:23:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

OvmfPkg/EnrollDefaultKeys: do not check VendorKeys

Browse source 
AuthVariableLib behavior wrt VendorKeys changes depending on
PcdRequireSelfSignedPk state.  Given this is not security critical
just skip the VendorKeys check in EnrollDefaultKeys

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
This commit is contained in:
Gerd Hoffmann 2026-04-02 15:25:23 +02:00 • committed by mergify[bot]
parent 0a7ed7ed34
commit 75ea215310
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
OvmfPkg/EnrollDefaultKeys/EnrollDefaultKeys.c
View file

@ -851,8 +851,7 @@ ShellAppMain (
PrintSettings (&Settings);
if ((Settings.SetupMode != 0) || (Settings.SecureBoot != 1) ||
(Settings.SecureBootEnable != 1) || (Settings.CustomMode != 0) ||
(Settings.VendorKeys != 0))
(Settings.SecureBootEnable != 1) || (Settings.CustomMode != 0))
{
AsciiPrint ("error: unexpected\n");
goto FreePkKek1;