Re: [PATCH v4 RESEND] efi: Do not import certificates from UEFI Secure Boot for T2 Macs

Both the comment here and the patch description above still needs to be improved. Perhaps something along these lines.

Checkout v5

Secure boot on Apple Macs with a T2 Security chip cannot read either the EFI variables or the certificates stored in different db's (e.g. db, dbx, MokListXRT). Attempting to read them causes ...

Avoid reading the EFI variables or the certificates stored in different dbs. As a result, without certificates secure boot signature verification fails.

thanks,

Mimi