alex 9595fd53aa fix(shim): let the firmware decide on images the shim can't verify ...

The security hooks returned their own errors for calls the shim can't
verify, instead of passing them to the original firmware hooks. The
Security2 hook rejected a missing device path or file buffer, which are
optional in the PI specification, and a boot policy of TRUE. The
Security hook returned NOT_FOUND for any file it couldn't read, like
one in a firmware volume.

Pass these calls to the original hook, which is what the firmware does
without the hook installed. This matches systemd-boot, and the
firmware still enforces its own verification, so nothing is let
through that the firmware would reject.

2026-09-26 20:52:15 -07:00

..

bls

fix(bls): ignore a byte order mark at the start of an entry

2026-09-26 20:52:15 -07:00

boot

fix(chainload): unload the image if it fails before being started

2026-09-26 20:52:15 -07:00

build

chore(docs): fix all rustdoc warnings (#54)

2025-12-21 14:11:10 -08:00

config

fix(config): make the default configuration match an empty one

2026-09-26 20:52:15 -07:00

eficore

fix(shim): let the firmware decide on images the shim can't verify

2026-09-26 20:52:15 -07:00

parsing

fix(initrd): pad each chained initrd to a 4-byte boundary

2026-09-26 20:52:15 -07:00