Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) client-ip=2620:137:e000::1:18;
From:   Aditya Garg <gargaditya08@live.com>
To:     Matthew Garrett <mjg59@srcf.ucam.org>
CC:     Ard Biesheuvel <ardb@kernel.org>, Jeremy Kerr <jk@ozlabs.org>,
        "joeyli.kernel@gmail.com" <joeyli.kernel@gmail.com>,
        "zohar@linux.ibm.com" <zohar@linux.ibm.com>,
        "jmorris@namei.org" <jmorris@namei.org>,
        "eric.snowberg@oracle.com" <eric.snowberg@oracle.com>,
        "dhowells@redhat.com" <dhowells@redhat.com>,
        "jlee@suse.com" <jlee@suse.com>,
        "James.Bottomley@hansenpartnership.com" 
        <James.Bottomley@HansenPartnership.com>,
        "jarkko@kernel.org" <jarkko@kernel.org>,
        "mic@digikod.net" <mic@digikod.net>,
        "dmitry.kasatkin@gmail.com" <dmitry.kasatkin@gmail.com>,
        Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
        "linux-efi@vger.kernel.org" <linux-efi@vger.kernel.org>,
        "linux-security-module@vger.kernel.org" 
        <linux-security-module@vger.kernel.org>,
        "stable@vger.kernel.org" <stable@vger.kernel.org>,
        "keyrings@vger.kernel.org" <keyrings@vger.kernel.org>,
        "linux-integrity@vger.kernel.org" <linux-integrity@vger.kernel.org>,
        Orlando Chamberlain <redecorating@protonmail.com>,
        Aun-Ali Zaidi <admin@kodeit.net>
Subject: Re: [PATCH] efi: Do not import certificates from UEFI Secure Boot for
 T2 Macs
Thread-Topic: [PATCH] efi: Do not import certificates from UEFI Secure Boot
 for T2 Macs
Thread-Index: AQHYHcE4ht34Z1CESEaNjR8+yzmieayLbqGAgAAURwCAAAlIgIAAESOAgACrMQCAAM6NgIAAs3IAgADC6YCAAODbAIAA55oAgADUSoCAAN0EAIAAMjSA
Date:   Mon, 14 Feb 2022 00:33:17 +0000
Message-ID: <272196DB-04A8-49E2-8BFA-545F989C0A5C@live.com>
References: <5A3C2EBF-13FF-4C37-B2A0-1533A818109F@live.com>
 <20220209183545.GA14552@srcf.ucam.org> <20220209193705.GA15463@srcf.ucam.org>
 <2F1CC5DE-5A03-46D2-95E7-DD07A4EF2766@live.com>
 <20220210180905.GB18445@srcf.ucam.org>
 <99BB011C-71DE-49FA-81CB-BE2AC9613030@live.com>
 <20220211162857.GB10606@srcf.ucam.org>
 <F078BEBE-3DED-4EE3-A2B8-2C5744B5454C@live.com>
 <20220212194240.GA4131@srcf.ucam.org>
 <C737F740-9039-4730-9F08-9E9E9674B6C8@live.com>
 <20220213213332.GA30613@srcf.ucam.org>
In-Reply-To: <20220213213332.GA30613@srcf.ucam.org>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn:  [34BNRea3seamNuZhnMi5/nbZaP5GvQBLBOmY5TDKuBRPu8dfDAB3lwSkfepxnK2E9+m6adSn1gU=]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 5d93fe6f-7807-49c5-99ec-08d9ef519867
x-ms-traffictypediagnostic: BM1PR01MB3458:EE_
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?Nodu13WKxulrXKuuhOpdiNhHh/erYsstyrgvolR3unUMHfJBSELtymVHEnmu?=
 =?us-ascii?Q?7niIox2I0Ieh83tvYeTfnXxWPKjM5HH5GHumtZ1Lt8ghH+oKbQhchpOfWASY?=
 =?us-ascii?Q?33y2yfiiK7BiHY6LE2djDg1cJpLTiMZbnIaUvXTuCY50iJjsUKLD61r91DNY?=
 =?us-ascii?Q?hbtkilcRM3FxQ0djupuIBT00TPyqK120r4e9gsmT6NqDQwnGt6NR28fu81dJ?=
 =?us-ascii?Q?uSmTczHOtcHymSDjrWWw6imgJa8wGQpWZsJLw8+nVXh6WDwekWILPcDX10zt?=
 =?us-ascii?Q?62PJUumPWo9GOUnFnxgpUxUPoH2CBv87V1/ukl+hDhibR6nccTrRAKP+eguT?=
 =?us-ascii?Q?LEzAgp/BqwFK/N03ZcEybQ32MINw0BGrqlcVPkaEE7abeBErU98K/dD3/Ca2?=
 =?us-ascii?Q?vAmMK98D8dQMmwnxvBMvtxLOAmrgVB4BFDWppzZMJATF3R6c/NmlxWAPCt9M?=
 =?us-ascii?Q?Mi5JK/+SVqUD6jkXQ6+ScUqAX22K2kwm3KKhBlFPoB5awxz1xHevJZHD8Kdz?=
 =?us-ascii?Q?aY45riP+/+BpZQBzNtxDCZLS4iY6v8+eLWCa7gFmINywAj4ehKDb34qvCqDB?=
 =?us-ascii?Q?i6eehR9G65g2pFlkrXV/TBNqhl60Wtovp7EbHLMvhwyHM+kv7brDaITbIguh?=
 =?us-ascii?Q?tdiDtmDKgMozPuk0LSBIFwx+kjMCA55JJ27odvvXOLCzu7kLsN/ulNS61dEV?=
 =?us-ascii?Q?PsWyPhB16ltZ1xtPZ87wxdK6MtZoAgr609dKKWagL4gF9NuZrQ3GTSTdvFsn?=
 =?us-ascii?Q?2/4Ixu5Ar6bD5PFr0qjr5XxE/ar8gtG5RegF7JtKP0brCsvtoV0rYb8LCkpS?=
 =?us-ascii?Q?qsLaVzLlj6fScPSJ9r04hhHr03/6Q8zXzZJhg5hb6VZ+sv2MSUdpvhmU1ZXA?=
 =?us-ascii?Q?0JeraCPH19k/NPBO662xiLzPWUuLyimLNIX3qHESU4i1vCd0cKh4wrU6ZeLS?=
 =?us-ascii?Q?IOMRq3VI0ObFRsb5x8Gcd5vPZ0kCz3UY6EAG1DtyFFyJ1W4M3ssKhSDHd1j+?=
 =?us-ascii?Q?1mivIFnrIKRzvgyJ+kqAXKvZcVRrGU4Dr1wAtJ89YpXkXjM=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-ID: <801CC6D1B0D40347ACED9598DFC84A83@INDPRD01.PROD.OUTLOOK.COM>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-42ed3.templateTenant
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PNZPR01MB4415.INDPRD01.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 5d93fe6f-7807-49c5-99ec-08d9ef519867
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Feb 2022 00:33:17.7327
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BM1PR01MB3458
X-Spam-Status: No, score=-1.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,
	HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,RDNS_NONE,
	SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no
	version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
	lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org


>=20
> Interesting. Ok, so there's something else going on here. I'll have=20
> access to a T2 system next week, so I'll take a look then. Is this=20
> something that started happening recently, or has it always happened if=20
> this config option is set on these platforms?

Before https://github.com/torvalds/linux/commit/f5390cd0b43c2e54c7cf5506c7d=
a4a37c5cef746, we had to add efi=3Dnoruntime to get Linux working on these =
machines. Now, its this config option only which is the issue.

You may want to follow https://wiki.t2linux.org/ to test on a T2 Mac, since=
 many T2 patches haven't been upstreamed yet.=