http://bugzilla.opensuse.org/show_bug.cgi?id=990650 http://bugzilla.opensuse.org/show_bug.cgi?id=990650#c1 Andrei Borzenkov changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |arvidjaar@gmail.com --- Comment #1 from Andrei Borzenkov --- What is the reason to add SUSE signature to shim? If someone rebuilds system with only SUSE key (removing Microsoft), user can also use provided signed grub.efi directly without shim? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=990650 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=990650 http://bugzilla.opensuse.org/show_bug.cgi?id=990650#c6 --- Comment #6 from Bruno Pesavento --- (In reply to Gary Ching-Pang Lin from comment #5)

Hi Bruno,

I probably couldn't do anything to the firmware in this case and would like to close this bug as WONTFIX.

You could drop ASUS a mail and point them to this edk2 commit: https://github.com/tianocore/edk2/commit/ 6de4c35f99f05f1d956538852c1cf003883043fd

Hope they didn't miss any security fixes in recent years...

That's OK with me, but maybe an optional shim_stripped.efi with one signature only might be included, as was on OS 12.x IIRC, so copying it to /boot/efi is easier than having to strip the OpenSUSE signature beforehand. -- You are receiving this mail because: You are on the CC list for the bug.