From 18f08826f98a58f214b622fbd299bf56389cc94d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ingo=20Bre=C3=9Fler?= Date: Mon, 22 Dec 2025 11:11:05 +0100 Subject: [PATCH] kern/efi/sb: Enable loading GRUB_FILE_TYPE_CRYPTODISK_ENCRYPTION_KEY and GRUB_FILE_TYPE_CRYPTODISK_DETACHED_HEADER MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... file types when UEFI Secure Boot is enabled. Otherwise it is not possible to load cryptodisk encryption key or detached header. Fixes: https://savannah.gnu.org/bugs/?65889 Signed-off-by: Ingo Breßler Signed-off-by: Daniel Kiper Reviewed-by: Alec Brown --- grub-core/kern/efi/sb.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/grub-core/kern/efi/sb.c b/grub-core/kern/efi/sb.c index 4409e03c5..b2bf38a54 100644 --- a/grub-core/kern/efi/sb.c +++ b/grub-core/kern/efi/sb.c @@ -152,6 +152,8 @@ shim_lock_verifier_init (grub_file_t io __attribute__ ((unused)), case GRUB_FILE_TYPE_TESTLOAD: case GRUB_FILE_TYPE_GET_SIZE: case GRUB_FILE_TYPE_ZFS_ENCRYPTION_KEY: + case GRUB_FILE_TYPE_CRYPTODISK_ENCRYPTION_KEY: + case GRUB_FILE_TYPE_CRYPTODISK_DETACHED_HEADER: case GRUB_FILE_TYPE_CAT: case GRUB_FILE_TYPE_HEXCAT: case GRUB_FILE_TYPE_CMP: