Re: [PATCH v7] efi: Do not import certificates from UEFI Secure Boot for T2 Macs

Hi Aditya,

On Fri, 2022-04-15 at 17:02 +0000, Aditya Garg wrote:

From: Aditya Garg gargaditya08@live.com

On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmware code and EFI runtime services are disabled with the following logs:

Are there directions for installing Linux on a Mac with Apple firmware code? Are you dual booting Linux and Mac, or just Linux? While in secure boot mode, without being able to read the keys to verify the kernel image signature, the signature verification should fail.

Has anyone else tested this patch?

thanks,

Mimi