Re: UEFI secure boot

[Daniel Kiper]

On Thu, Feb 16, 2017 at 09:21:19AM +0100, Dennis Wassenberg wrote:
> Hi all,
>
> I have a question regarding grub2 in relation with UEFI secure boot. I
> do use a grub2 efi binary which is signed with sbsigntools. If the grub2
> starts I think there is in general no information about that the grub2
> is booted in secure boot environment.

Why do you need that?

> Is there a possibility to show that in grub2? I found no way to do that.

If there is an use case why not.

> Are you interested in having the possibility to show the uefi secure
> boot status (e.g. EFI variable secureboot)?

I am going to work on shim protocol verification for Multiboot2
compatible images. I hope that it will be taken into GRUB2 2.03.

Daniel