Verification-done on xenial using grub2 2.02~beta2-36ubuntu3.12:
/proc/sys/kernel/moksbstate_disabled reads 1 when shim validation is disabled (as expected given this update). Prompting is correctly done when installing a new DKMS module with Secure Boot validation in shim enabled; and no prompting happens when validation is already disabled.
Verification-done on xenial using grub2 2.02~beta2- 36ubuntu3. 12:
/proc/sys/ kernel/ moksbstate_ disabled reads 1 when shim validation is disabled (as expected given this update). Prompting is correctly done when installing a new DKMS module with Secure Boot validation in shim enabled; and no prompting happens when validation is already disabled.