tree 8cb77422a7c168a1b2b3b5481d907df76c7780d6
parent 79f428e48b83ed5c9f7a8620d8ab8ac8cc2ca1ce
author AKASHI Takahiro <takahiro.akashi@linaro.org> 1597305929 +0900
committer Heinrich Schuchardt <xypron.glpk@gmx.de> 1597351062 +0200

efi_loader: variable: fix secure state initialization

Under the new file-based variable implementation, the secure state
is always and falsely set to 0 (hence, the secure boot gets disabled)
after the reboot even if PK (and other signature database) has already
been enrolled in the previous boot.

This is because the secure state is set up *before* loading non-volatile
variables' values from saved data.

This patch fixes the order of variable initialization and secure state
initialization.

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
Fixes: 5f7dcf079de8 ("efi_loader: UEFI variable persistence")