rhboot / shim

UEFI shim loader

rhboot/shim Issues

Strange calls during network boot
Updated 2 months ago7
RFC: Revocation Delivery Proposal
Updated 2 months ago6
Too big `dbx` causes Shim to refuse to boot, presumably due to "failure" from `tpm2->hash_log_extend_event()`
Updated 3 months ago1
Surface Book 2 hangs at vendor logo after firmware upgrade
Updated 3 months ago2
Unable to boot with ventoy after shim update
Updated 3 months ago9
need help to build shimaa64 on ubuntu 20 x86_64, thanks
Closed 3 months ago1
trying to build shimx32.efi with security policy on ubuntu 20 64bit but failed, any help would be appreciated
Closed 3 months ago
Fail the build if VENDOR_CERT_FILE is PEM-encoded
Closed 4 months ago
Third-party bootloader support
Closed 4 months ago1
Using OVERRIDE_SECURY_POLICY flag causes build to fail
Updated 4 months ago18
[Documentation] Usage examples + Screenshots?
Updated 4 months ago5
No device_path information when extending PCR4 done by shim_verify
Updated 4 months ago9
15.8 release tarball can not be verified
Closed 5 months ago7
What is the best way to test Shim with Vendor Certificate
Closed 5 months ago4
Testing shim-15.8, cannot start grub
Closed 5 months ago4
A request for low-level developers
Closed 5 months ago2
remove shim HTTP boot due to security issues
Closed 5 months ago10
Cannot secure boot with new Certificate embedded, Verification failed (0x1A) Security Violation
Updated 5 months ago2
SBAT.md recommends resetting vendor generation numbers after global generation number went up
Updated 5 months ago1
Freshly compiled Shim-15.7 (x86_64) cannot load grubx64.efi
Updated 5 months ago11
Shim always uses 512 byte block size to fetch grub EFI binary
Updated 5 months ago2
No Logging In Memory Attribute Protocol Failure
Closed 5 months ago
add option to check if shim is in use - How to check if the system is using shim or not?
Updated 7 months ago
Is 15.8 being prepared?
Updated 7 months ago7
RFE: instead of invoking exactly grubx64.efi iterate through drop-in dir
Updated 7 months ago19
Why kernel builds do not calculate CheckSum or should it be reset to zero?
Closed 7 months ago1
Verification by vendor cert -- dead code?
Updated 8 months ago2
Minor updates required in MokVars.txt
Updated 9 months ago
Key was rejected by service 😭
Updated 9 months ago
shim should stop loading binaries without a .sbat section
Updated 9 months ago4
Setting memory attributes in handle_image() does not comply with UEFI specification
Updated 9 months ago
SBAT security generations for the Linux kernel
Updated 10 months ago11
Building shim with more than one certificate
Closed 10 months ago6
Skip EFI entry installation
Updated 10 months ago7
"Press the Pause key now" message shown but could not pause
Updated 10 months ago
Debugging shim in gdb gives 'Dwarf Error: DW_FORM_line_strp used without required section'
Updated 10 months ago
Authenticode needs to be computed against a padded and an unpadded binary.
Updated 10 months ago
Does openssl CVE affect shim?
Closed 10 months ago1
Debian Bug #989463 - Secure Boot 😠 - Can't load certificate
Closed a year ago4
Questions on the instructions in BUILDING
Updated a year ago2
I made one with a secure boot certificate, but it cannot be loaded under secure boot.
Updated a year ago5
With the latest SHIM are there any changes to GRUB/Loaded items needed?
Updated a year ago
Investigate if OpenSSL (libcrypto) vendored in here can be FIPS certified
Updated a year ago4
Exception occur when start ubuntu 22.04 using qemu on arm64
Closed a year ago2
Possible regression: 2021.08.12 shim boots whereas 2023.01.18 freezes in a chain-loaded Secure Boot context
Closed a year ago4
shim image loader assumes padding relocs are added by GenFw, but not all efi files have this
Closed a year ago4
RFE: add protocol to let 2nd/3rd stage loaders append ephemerally to MokListRT
Updated a year ago4
System always in a reboot loop when selecting hard disk as boot option
Updated a year ago3
Can shim load UKI efi images from /boot
Closed a year ago1
How does shim compute SHA256 hashes?
Updated a year ago3