alex 9595fd53aa fix(shim): let the firmware decide on images the shim can't verify ...

The security hooks returned their own errors for calls the shim can't
verify, instead of passing them to the original firmware hooks. The
Security2 hook rejected a missing device path or file buffer, which are
optional in the PI specification, and a boot policy of TRUE. The
Security hook returned NOT_FOUND for any file it couldn't read, like
one in a firmware volume.

Pass these calls to the original hook, which is what the firmware does
without the hook installed. This matches systemd-boot, and the
firmware still enforces its own verification, so nothing is let
through that the firmware would reject.

2026-09-26 20:52:15 -07:00

..

src

fix(shim): let the firmware decide on images the shim can't verify

2026-09-26 20:52:15 -07:00

Cargo.toml

Skip the UEFI crates during cargo test

2026-03-25 16:07:21 -04:00