summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAlexandru Avadanii <Alexandru.Avadanii@enea.com>2021-03-29 09:39:42 +0200
committerJia Zhang <zhang.jia@linux.alibaba.com>2021-03-29 21:01:36 +0800
commitf7ae553e6c5d512e8730df2224d690a25fc5e7a5 (patch)
tree7f532c7fba2932f22a25b64af3f19b8011c3b824
parentab13b08e43c3f61c73bff84a9e7f1c398067ed83 (diff)
downloadmeta-secure-core-f7ae553e6c5d512e8730df2224d690a25fc5e7a5.tar.gz
grub: Drop useless insmod verify from cfg
- the 'verify' grub module has been renamed to 'pgp' in grub 2.04; - the 'pgp' grub module is already built-in if GRUB_SIGN_VERIFY is set, so there's no need to call insmod; While at it, remove some unnecessary code duplication. Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
-rw-r--r--meta-efi-secure-boot/recipes-bsp/grub/grub-efi-efi-secure-boot.inc8
1 files changed, 2 insertions, 6 deletions
diff --git a/meta-efi-secure-boot/recipes-bsp/grub/grub-efi-efi-secure-boot.inc b/meta-efi-secure-boot/recipes-bsp/grub/grub-efi-efi-secure-boot.inc
index 2e97de1..5cdaa1c 100644
--- a/meta-efi-secure-boot/recipes-bsp/grub/grub-efi-efi-secure-boot.inc
+++ b/meta-efi-secure-boot/recipes-bsp/grub/grub-efi-efi-secure-boot.inc
@@ -81,17 +81,13 @@ python __anonymous () {
81do_compile_append() { 81do_compile_append() {
82 if [ "${GRUB_SIGN_VERIFY}" = "1" -a "${GRUB_SIGN_VERIFY_STRICT}" = "1" ] ; then 82 if [ "${GRUB_SIGN_VERIFY}" = "1" -a "${GRUB_SIGN_VERIFY_STRICT}" = "1" ] ; then
83 cat<<EOF>${WORKDIR}/cfg 83 cat<<EOF>${WORKDIR}/cfg
84insmod verify
85set strict_security=1 84set strict_security=1
86search.file (\$cmdpath)${GRUB_PREFIX_DIR}/grub.cfg root
87set prefix=(\$root)${GRUB_PREFIX_DIR}
88EOF 85EOF
89 else 86 fi
90 cat<<EOF>${WORKDIR}/cfg 87 cat<<EOF>>${WORKDIR}/cfg
91search.file (\$cmdpath)${GRUB_PREFIX_DIR}/grub.cfg root 88search.file (\$cmdpath)${GRUB_PREFIX_DIR}/grub.cfg root
92set prefix=(\$root)${GRUB_PREFIX_DIR} 89set prefix=(\$root)${GRUB_PREFIX_DIR}
93EOF 90EOF
94 fi
95} 91}
96 92
97do_compile_append_class-native() { 93do_compile_append_class-native() {