diff --git a/debian/changelog b/debian/changelog index 9d6bce36f..16ee08d9d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -24,6 +24,9 @@ linux (4.19.20-2) UNRELEASED; urgency=medium is enabled on Orange Pi Plus. * [armhf] Enable REGULATOR_SY8106A as module. + [ dann frazier ] + * arm64: lockdown: Move init_lockdown() call after uefi_init() + -- Ben Hutchings Tue, 12 Feb 2019 12:49:10 +0000 linux (4.19.20-1) unstable; urgency=medium diff --git a/debian/patches/features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch b/debian/patches/features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch index 2bd2ce1d3..1f8fac6c4 100644 --- a/debian/patches/features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch +++ b/debian/patches/features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch @@ -19,6 +19,7 @@ Signed-off-by: Linn Crosetto efi_set_secure_boot() in main kernel - Use lockdown API and naming] [bwh: Forward-ported to 4.19.3: adjust context in update_fdt()] +[dannf: Moved init_lockdown() call after uefi_init(), fixing SB detection] --- arch/arm64/Kconfig | 13 +++++++++++++ drivers/firmware/efi/arm-init.c | 7 +++++++ @@ -39,16 +40,16 @@ Signed-off-by: Linn Crosetto #include -@@ -252,6 +253,9 @@ void __init efi_init(void) - "Unexpected EFI_MEMORY_DESCRIPTOR version %ld", - efi.memmap.desc_version); +@@ -257,6 +258,9 @@ void __init efi_init(void) + return; + } + efi_set_secure_boot(params.secure_boot); + init_lockdown(); + - if (uefi_init() < 0) { - efi_memmap_unmap(); - return; + reserve_regions(); + efi_esrt_init(); + --- a/drivers/firmware/efi/efi.c +++ b/drivers/firmware/efi/efi.c @@ -657,7 +657,8 @@ static __initdata struct params fdt_para