summaryrefslogtreecommitdiff
path: root/SecurityPkg/VariableAuthenticated
diff options
context:
space:
mode:
authorZhang, Chao B <chao.b.zhang@intel.com>2016-05-04 10:32:09 +0800
committerHao Wu <hao.a.wu@intel.com>2016-07-06 16:20:11 +0800
commit9a41bd5358b6ffdd0e52684da80310a9fbcda92e (patch)
tree4592f3023d2ed74df2db0aec6caae69ed81501d9 /SecurityPkg/VariableAuthenticated
parent31af8542155f8278bd3c55e50eead918aecdae6f (diff)
downloadedk2-platforms-9a41bd5358b6ffdd0e52684da80310a9fbcda92e.tar.xz
SecurityPkg: SecureBootConfigDxe: Disable SecureBoot Enable/Disable in some case
Disable SecureBoot Enable/Disable feature when PhysicalPresence is not available, Since SecureBootEnable is protected with PhysicalPresence. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Chao Zhang <chao.b.zhang@intel.com> Reviewed-by: Fu Siyuan <siyuan.fu@intel.com> (cherry picked from commit e8903bb7bf3f975ce8d1986bdbbaaf05c29c0e2b)
Diffstat (limited to 'SecurityPkg/VariableAuthenticated')
-rw-r--r--SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr2
1 files changed, 1 insertions, 1 deletions
diff --git a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr
index 5ac85c462a..ee9a52a72e 100644
--- a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr
+++ b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr
@@ -41,7 +41,7 @@ formset
//
// Display of Check Box: Attempt Secure Boot
//
- grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;
+ grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1 OR NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;
checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot,
questionid = KEY_SECURE_BOOT_ENABLE,
prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT),