The code does look like it will chainload via shim: linuxefi_secure_validate() runs, checks that the image is valid against firmware stores and the MokList.
Then grub_cmd_chainloader -> (grub_linuxefi_secure_validate() find the image valid) -> grub_secureboot_chainloader_boot() -> handle_image() [ read image header, identify relocations, find entry point, etc.] -> efi_call_2 (entry point) -> Image is started -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1847458 Title: EFI chainloader no longer uses shim lock protocol To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1847458/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
