[PATCH] trust machine keyring (MoK) by default
authorLuca Boccassi <bluca@debian.org>
Thu, 13 Oct 2022 22:22:06 +0000 (00:22 +0200)
committerSalvatore Bonaccorso <carnil@debian.org>
Sun, 8 Sep 2024 18:29:08 +0000 (20:29 +0200)
commitce04f4826380228d03e423b542b8bb57c64cf485
tree1b3b2d7a0a53cd0e97b3e6949ada1d6b0756caa7
parente284484f72a905c7eef9ce57f9defd76d698cd34
[PATCH] trust machine keyring (MoK) by default

From 585cbcb982bffc4a8cee2f3d8d099fc64f9a74b9 Mon Sep 17 00:00:00 2001
Forwarded: not-needed

Debian always trusted keys in MoK by default. Upstream made it
conditional on a new EFI variable being set.
To keep backward compatibility skip this check.

Gbp-Pq: Topic features/all/db-mok-keyring
Gbp-Pq: Name trust-machine-keyring-by-default.patch
security/integrity/platform_certs/machine_keyring.c