Re: [PATCHv2 RESEND] efi: Correct Macmini DMI match in uefi cert quirk

From: Mimi Zohar
Date: Fri Sep 30 2022 - 14:25:35 EST


Hi Orlando,

On Thu, 2022-09-29 at 11:49 +0000, Orlando Chamberlain wrote:
> It turns out Apple doesn't capitalise the "mini" in "Macmini" in DMI, which
> is inconsistent with other model line names.
>
> Correct the capitalisation of Macmini in the quirk for skipping loading
> platform certs on T2 Macs.
>
> Currently users get:
>
> ------------[ cut here ]------------
> [Firmware Bug]: Page fault caused by firmware at PA: 0xffffa30640054000
> WARNING: CPU: 1 PID: 8 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x55/0xe0
> Modules linked in:
> CPU: 1 PID: 8 Comm: kworker/u12:0 Not tainted 5.18.14-arch1-2-t2 #1 4535eb3fc40fd08edab32a509fbf4c9bc52d111e
> Hardware name: Apple Inc. Macmini8,1/Mac-7BA5B2DFE22DDD8C, BIOS 1731.120.10.0.0 (iBridge: 19.16.15071.0.0,0) 04/24/2022
> Workqueue: efi_rts_wq efi_call_rts
> ...
> ---[ end trace 0000000000000000 ]---
> efi: Froze efi_rts_wq and disabled EFI Runtime Services
> integrity: Couldn't get size: 0x8000000000000015
> integrity: MODSIGN: Couldn't get UEFI db list
> efi: EFI Runtime Services are disabled!
> integrity: Couldn't get size: 0x8000000000000015
> integrity: Couldn't get UEFI dbx list
>
> Fixes: 155ca952c7ca ("efi: Do not import certificates from UEFI Secure Boot for T2 Macs")
> Cc: stable@xxxxxxxxxxxxxxx
> Cc: Aditya Garg <gargaditya08@xxxxxxxx>
> Tested-by: Samuel Jiang <chyishian.jiang@xxxxxxxxx>
> Signed-off-by: Orlando Chamberlain <redecorating@xxxxxxxxxxxxxx>

Thanks! The patch is now queued in the next-integrity branch.

Mimi