On Mon, December 22, 2025 at 5:11 AM, Daniel Kiper <[email protected]> 
wrote:
> From: Ingo Breßler <[email protected]>
> 
> ... file types when UEFI Secure Boot is enabled. Otherwise it is not possible 
> to load cryptodisk
> encryption key or detached header.
> 
> Fixes: https://savannah.gnu.org/bugs/?65889
> 
> Signed-off-by: Ingo Breßler <[email protected]>
> Signed-off-by: Daniel Kiper <[email protected]>
> ---
>  grub-core/kern/efi/sb.c | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/grub-core/kern/efi/sb.c b/grub-core/kern/efi/sb.c index 
> 4409e03c5..b2bf38a54 100644
> --- a/grub-core/kern/efi/sb.c
> +++ b/grub-core/kern/efi/sb.c
> @@ -152,6 +152,8 @@ shim_lock_verifier_init (grub_file_t io __attribute__ 
> ((unused)),
>      case GRUB_FILE_TYPE_TESTLOAD:
>      case GRUB_FILE_TYPE_GET_SIZE:
>      case GRUB_FILE_TYPE_ZFS_ENCRYPTION_KEY:
> +    case GRUB_FILE_TYPE_CRYPTODISK_ENCRYPTION_KEY:
> +    case GRUB_FILE_TYPE_CRYPTODISK_DETACHED_HEADER:
>      case GRUB_FILE_TYPE_CAT:
>      case GRUB_FILE_TYPE_HEXCAT:
>      case GRUB_FILE_TYPE_CMP:
> --
> 2.11.0

LGTM! Thanks!

Reviewed-by: Alec Brown <[email protected]>

Alec Brown
_______________________________________________
Grub-devel mailing list
[email protected]
https://lists.gnu.org/mailman/listinfo/grub-devel

Reply via email to