Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Misleading status when efivarfs not mounted #383

Closed
pietrushnic opened this issue Oct 7, 2024 · 0 comments
Closed

Misleading status when efivarfs not mounted #383

pietrushnic opened this issue Oct 7, 2024 · 0 comments

Comments

@pietrushnic
Copy link

bash-5.2# cd /home/root
bash-5.2# ./sbctl/sbctl status
Installed:      ✓ sbctl is installed
Owner GUID:     fb8175ff-2e1e-4993-b4ae-12320437aff1
Setup Mode:     ✓ Disabled
Secure Boot:    ✗ Disabled
Vendor Keys:    none
bash-5.2# ls /sys/firmware/efi/efivars/
bash-5.2# mount -t efivarfs efivarfs /sys/firmware/efi/efivars/
bash-5.2# ./sbctl/sbctl status
Installed:      ✓ sbctl is installed
Owner GUID:     fb8175ff-2e1e-4993-b4ae-12320437aff1
Setup Mode:     ✗ Enabled
Secure Boot:    ✗ Disabled
Vendor Keys:    builtin-db builtin-db builtin-db builtin-db builtin-KEK builtin-KEK
bash-5.2#

It looks like sbctl silently made up the Setup Mode variable status when efivarfs is not mounted. Since sbctl relies on UEFI variables as a source of truth about UEFI Secure Boot status, maybe it should not say anything about the status when efivarfs is unavailable.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant