diff options
author | Zhang, Chao B <chao.b.zhang@intel.com> | 2016-05-04 10:32:09 +0800 |
---|---|---|
committer | Hao Wu <hao.a.wu@intel.com> | 2016-07-06 16:20:11 +0800 |
commit | 9a41bd5358b6ffdd0e52684da80310a9fbcda92e (patch) | |
tree | 4592f3023d2ed74df2db0aec6caae69ed81501d9 /SecurityPkg/VariableAuthenticated | |
parent | 31af8542155f8278bd3c55e50eead918aecdae6f (diff) | |
download | edk2-platforms-9a41bd5358b6ffdd0e52684da80310a9fbcda92e.tar.xz |
SecurityPkg: SecureBootConfigDxe: Disable SecureBoot Enable/Disable in some case
Disable SecureBoot Enable/Disable feature when PhysicalPresence is not available,
Since SecureBootEnable is protected with PhysicalPresence.
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Chao Zhang <chao.b.zhang@intel.com>
Reviewed-by: Fu Siyuan <siyuan.fu@intel.com>
(cherry picked from commit e8903bb7bf3f975ce8d1986bdbbaaf05c29c0e2b)
Diffstat (limited to 'SecurityPkg/VariableAuthenticated')
-rw-r--r-- | SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr index 5ac85c462a..ee9a52a72e 100644 --- a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr +++ b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr @@ -41,7 +41,7 @@ formset //
// Display of Check Box: Attempt Secure Boot
//
- grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;
+ grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1 OR NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;
checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot,
questionid = KEY_SECURE_BOOT_ENABLE,
prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT),
|