Lee, Chun-Yi 92ad19559e integrity: Do not load MOK and MOKx when secure boot be disabled ... The security of Machine Owner Key (MOK) relies on secure boot. When secure boot is disabled, EFI firmware will not verify binary code. Then arbitrary efi binary code can modify MOK when rebooting. This patch prevents MOK/MOKx be loaded when secure boot be disabled. Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com> Reviewed-by: Petr Vorel <pvorel@suse.cz> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>		2021-12-24 10:25:24 -05:00
..
efi_parser.c	efi: Don't use knowledge about efi_guid_t internals	2021-08-27 16:01:27 +02:00
keyring_handler.c	certs: Add EFI_CERT_X509_GUID support for dbx entries	2021-03-11 16:31:28 +00:00
keyring_handler.h	x86/efi: move common keyring handler functions to new file	2019-11-13 00:33:23 +11:00
load_ipl_s390.c	s390/ipl: read IPL report at early boot	2019-04-26 12:34:05 +02:00
load_powerpc.c	powerpc: Load firmware trusted keys/hashes into kernel keyring	2019-11-13 00:33:23 +11:00
load_uefi.c	integrity: Do not load MOK and MOKx when secure boot be disabled	2021-12-24 10:25:24 -05:00
platform_keyring.c	Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs"	2019-07-10 18:43:43 -07:00