From 83b3a7cf6d4d4e91579864cfc75dadf2b7304da9 Mon Sep 17 00:00:00 2001

From: Peter Jones <pjones@redhat.com>

Date: Mon, 28 Oct 2013 10:41:03 -0400

Subject: [PATCH 4/5] We should be checking both mok and the system's SB

 settings

When we call hook_system_services(), we're currently only checking mok's

setting.  We should use secure_mode() instead so it'll check both.

Signed-off-by: Peter Jones <pjones@redhat.com>

---

 shim.c | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/shim.c b/shim.c

index 537177d..9d0d884 100644

--- a/shim.c

+++ b/shim.c

@@ -1718,7 +1718,7 @@ EFI_STATUS efi_main (EFI_HANDLE image_handle, EFI_SYSTEM_TABLE *passed_systab)

 	/*

 	 * Tell the user that we're in insecure mode if necessary

 	 */

-	if (insecure_mode) {

+	if (!secure_mode()) {

 		Print(L"Booting in insecure mode\n");

 		uefi_call_wrapper(BS->Stall, 1, 2000000);

 	} else {

-- 

1.8.3.1