Comment # 6 on bug 990650 from Bruno Pesavento

(In reply to Gary Ching-Pang Lin from comment #5)
> Hi Bruno,
> 
> I probably couldn't do anything to the firmware in this case and would like
> to close this bug as WONTFIX.
> 
> You could drop ASUS a mail and point them to this edk2 commit:
> https://github.com/tianocore/edk2/commit/
> 6de4c35f99f05f1d956538852c1cf003883043fd
> 
> Hope they didn't miss any security fixes in recent years...

That's OK with me, but maybe an optional shim_stripped.efi with one signature
only might be included, as was on OS 12.x IIRC, so copying it to /boot/efi is
easier than having to strip the OpenSUSE signature beforehand.