Re: Signed EFI files ?

[Andrey Borzenkov]

В Thu, 22 Nov 2012 01:29:06 +0100
"address@hidden" <address@hidden> пишет:

> Dear all,
> 
> - When installing grub-efi (2.00), does it install signed EFI files by
> default when possible?
> 

No. Private keys used to sign binaries are what they are - private.
Even assuming those keys were available, distributing them with grub2
sources would effectively invalidate them.  

> - I saw some computers with both grubx64.efi and shimx64.efi files, i
> guess the shimx64.efi file is signed but not the grubx64.efi one, am i
> correct?
> 

Yes. Out of curiosity - which system is it? As far as I know LF shim is
still not available.