linux-kernel - [PATCH] Use the UEFI shim to load grub.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Wed,  8 Aug 2012 10:18:17 -0400
From:	Peter Jones <pjones@...hat.com>
To:	dhowells@...hat.com
Cc:	jwboyer@...hat.com, linux-kernel@...r.kernel.org,
	Peter Jones <pjones@...hat.com>
Subject: [PATCH] Use the UEFI shim to load grub.

For UEFI Secure Boot support, we need to install the shim pre-boot
loader, and use it to load grub2.
---
 pyanaconda/bootloader.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pyanaconda/bootloader.py b/pyanaconda/bootloader.py
index ea4de5e..02d0ea8 100644
--- a/pyanaconda/bootloader.py
+++ b/pyanaconda/bootloader.py
@@ -1749,7 +1749,7 @@ class GRUB2(GRUB):
         self.stage2_device.format.sync(root=ROOT_PATH)
 
 class EFIGRUB(GRUB2):
-    packages = ["grub2-efi", "efibootmgr"]
+    packages = ["grub2-efi", "efibootmgr", "shim"]
     can_dual_boot = False
 
     @property
@@ -1809,7 +1809,7 @@ class EFIGRUB(GRUB2):
         rc = self.efibootmgr("-c", "-w", "-L", productName,
                              "-d", boot_disk.path, "-p", boot_part_num,
                              "-l",
-                             self.efi_dir_as_efifs_dir + "\\grubx64.efi",
+                             self.efi_dir_as_efifs_dir + "\\shim.efi",
                              root=ROOT_PATH,
                              stdout="/dev/tty5", stderr="/dev/tty5")
         if rc:
-- 
1.7.11.2

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/