Currently if the bootefi command fails due to missing authentication, the user gets no feedback.
Write a log message 'Image not authenticated' if LoadImage() fails due to missing authentication.
Signed-off-by: Heinrich Schuchardt xypron.glpk@gmx.de --- lib/efi_loader/efi_image_loader.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/lib/efi_loader/efi_image_loader.c b/lib/efi_loader/efi_image_loader.c index da50fc31f1..94f76ef6b8 100644 --- a/lib/efi_loader/efi_image_loader.c +++ b/lib/efi_loader/efi_image_loader.c @@ -762,10 +762,12 @@ efi_status_t efi_load_pe(struct efi_loaded_image_obj *handle, }
/* Authenticate an image */ - if (efi_image_authenticate(efi, efi_size)) + if (efi_image_authenticate(efi, efi_size)) { handle->auth_status = EFI_IMAGE_AUTH_PASSED; - else + } else { handle->auth_status = EFI_IMAGE_AUTH_FAILED; + log_err("Image not authenticated\n"); + }
/* Calculate upper virtual address boundary */ for (i = num_sections - 1; i >= 0; i--) { -- 2.28.0