Ubuntu
linux package

  1. Zesty (17.04)
  2. Bug #1658255
  3. Comment #5

Comment 5 for bug 1658255

Revision history for this message
Kees Cook (kees) wrote :

the proc handler does:
        secure_boot_enabled = efi_enabled(EFI_SECURE_BOOT);
this feature flag is set at boot:
#ifdef CONFIG_EFI_SECURE_BOOT_SIG_ENFORCE
        if (boot_params.secure_boot == EFI_SECURE_BOOT) {
                set_bit(EFI_SECURE_BOOT, &efi.flags);
                enforce_signed_modules();
                pr_info("Secure boot enabled\n");
        }

And since I don't see the pr_info, nor the flag, nor the module enforcement, the boot_params is probably missing?