[U-Boot] [RFC 11/15] efi_loader: initialize secure boot state

AKASHI Takahiro
2019-09-18T01:26:39Z

We call efi_init_secure_boot() after loading saved UEFI variables so that
the initial secure boot status will be initialized.

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
---
lib/efi_loader/efi_setup.c | 5 +++++
1 file changed, 5 insertions(+)

diff --git a/lib/efi_loader/efi_setup.c b/lib/efi_loader/efi_setup.c
index 0d915ba386da..de8f0bd7e68e 100644
--- a/lib/efi_loader/efi_setup.c
+++ b/lib/efi_loader/efi_setup.c
@@ -132,6 +132,11 @@ efi_status_t efi_init_obj_list(void)
if (ret != EFI_SUCCESS)
goto out;

+ /* Secure boot */
+ ret = efi_init_secure_boot();
+ if (ret != EFI_SUCCESS)
+ goto out;
+
/* Indicate supported runtime services */
ret = efi_init_runtime_supported();
if (ret != EFI_SUCCESS)
--
2.21.0