bugGNU GRUB - Bugs: bug #65889, cryptomount with keyfile fails...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #65889: cryptomount with keyfile fails because of shim lock verifier

Submitter:  Mohammad Reza Moghaddasi <vision>
Submitted:  Tue 18 Jun 2024 12:15:25 PM UTC
   
 
Category:  None Severity:  Major
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Originator Name:  Mohammad Reza Moghaddasi
Open/Closed:  Open Release:  Git master
Release:  Reproducibility:  Every Time
Planned Release:  None

Fri 03 Jan 2025 09:09:15 AM UTC, comment #4: 
g10
Fri 03 Jan 2025 07:34:51 AM UTC, comment #3: 

What is their email?

comment #2:

> Are you able to build GRUB with this modification yourself and verify that the fix works? If so, please send the patch to the grub-devel mailinglist. If you are not able to do this, I suggest you send an email to the grub-devel mailinglist describing this bug there so more people will see this.

Mohammad Reza Moghaddasi <vision>
Fri 03 Jan 2025 07:27:12 AM UTC, comment #2: 

Are you able to build GRUB with this modification yourself and verify that the fix works? If so, please send the patch to the grub-devel mailinglist. If you are not able to do this, I suggest you send an email to the grub-devel mailinglist describing this bug there so more people will see this.

g10
Wed 19 Jun 2024 06:47:47 PM UTC, comment #1: 

original submission:

> I reviewd source code and find out the cause:
>
>
> type "GRUB_FILE_TYPE_CRYPTODISK_ENCRYPTION_KEY" which is defiend in file "grub-core/disk/cryptodisk.c" is not included in "grub-core/kern/efi/sb.c" in "shim_lock_verifier_init" . because of that grub will deny loading keyfile and says "error: prohibited by secure boot policy.


If I'm right, please comment me and make those changes for next release ...

Mohammad Reza Moghaddasi <vision>
Tue 18 Jun 2024 12:15:25 PM UTC, original submission:  

I reviewd source code and find out the cause:


type "GRUB_FILE_TYPE_CRYPTODISK_ENCRYPTION_KEY" which is defiend in file "grub-core/disk/cryptodisk.c" is not included in "grub-core/kern/efi/sb.c" in "shim_lock_verifier_init" . because of that grub will deny loading keyfile and says "error: prohibited by secure boot policy"

Mohammad Reza Moghaddasi <vision>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by g10 (Posted a comment)
  • -email is unavailable- added by vision (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    No changes have been made to this item

    Back to the top

    Powered by Savane 3.14-962f.
    Corresponding source code