32f6f1f55a
- Add shim-disable-export-vendor-dbx.patch to disable exporting vendor-dbx to MokListXRT since writing a large RT variable could crash some machines (bsc#1185261) - Add shim-bsc1187260-fix-efi-1.10-machines.patch to avoid the potential crash when calling QueryVariableInfo in EFI 1.10 machines (bsc#1187260) - Add shim-fix-aa64-relsz.patch to fix the size of rela sections for AArch64 Fix: https://github.com/rhboot/shim/issues/371 OBS-URL: https://build.opensuse.org/request/show/901053 OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=184
37 lines
1.2 KiB
Diff
37 lines
1.2 KiB
Diff
From 41da21f1f9d4af213f9f235a864772b99ce85fc7 Mon Sep 17 00:00:00 2001
|
|
From: Gary Lin <glin@suse.com>
|
|
Date: Fri, 18 Jun 2021 17:54:46 +0800
|
|
Subject: [PATCH] Disable exporting vendor-dbx to MokListXRT
|
|
|
|
As the vendor-dbx grows, it caused some problems when writing such
|
|
a large variable. Some firmwares lie the avaiable space(*1) , and
|
|
some even crash(*2) for no good reason after the writing of
|
|
MokListXRT. Both shim and kernel don't rely on MokListXRT to block
|
|
anything, so we just stop exporting vendor-dbx to MokListXRT to
|
|
avoid the potential hassles.
|
|
|
|
(*1) https://bugzilla.suse.com/show_bug.cgi?id=1185261
|
|
(*2) https://github.com/rhboot/shim/pull/369#issuecomment-855275115
|
|
|
|
Signed-off-by: Gary Lin <glin@suse.com>
|
|
---
|
|
mok.c | 2 --
|
|
1 file changed, 2 deletions(-)
|
|
|
|
diff --git a/mok.c b/mok.c
|
|
index beac0ff6..a687a92b 100644
|
|
--- a/mok.c
|
|
+++ b/mok.c
|
|
@@ -194,8 +194,6 @@ struct mok_state_variable mok_state_variables[] = {
|
|
EFI_VARIABLE_NON_VOLATILE,
|
|
.no_attr = EFI_VARIABLE_RUNTIME_ACCESS,
|
|
.categorize_addend = categorize_deauthorized,
|
|
- .addend = &vendor_deauthorized,
|
|
- .addend_size = &vendor_deauthorized_size,
|
|
.flags = MOK_MIRROR_KEYDB |
|
|
MOK_MIRROR_DELETE_FIRST |
|
|
MOK_VARIABLE_LOG,
|
|
--
|
|
2.31.1
|
|
|