diff options
| author | Lee, Chun-Yi <[email protected]> | 2021-12-18 10:09:05 +0800 |
|---|---|---|
| committer | Mimi Zohar <[email protected]> | 2021-12-24 10:25:24 -0500 |
| commit | 92ad19559ea9a8ec6f158480934ae26ebfe2c14f (patch) | |
| tree | 7cab118eacabaecc222cbc63040de48a016005ee /tools/perf/scripts/python/syscall-counts-by-pid.py | |
| parent | 54bf7fa3efd08eea03e4bac04e188ee3db6173a7 (diff) | |
integrity: Do not load MOK and MOKx when secure boot be disabled
The security of Machine Owner Key (MOK) relies on secure boot. When
secure boot is disabled, EFI firmware will not verify binary code. Then
arbitrary efi binary code can modify MOK when rebooting.
This patch prevents MOK/MOKx be loaded when secure boot be disabled.
Signed-off-by: "Lee, Chun-Yi" <[email protected]>
Reviewed-by: Petr Vorel <[email protected]>
Signed-off-by: Mimi Zohar <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/syscall-counts-by-pid.py')
0 files changed, 0 insertions, 0 deletions