Package: shim-signed-common
Version: 1.46
Severity: important

[ Given that this seems security sensitive, I've set it to important,
  but feel free to lower or rise it as you deem fit. ]

Hi!

If I've not gotten the origin of the problem incorrectly, the recent
shim-signed upgrade caused a debconf prompt to pop up (I think from
update-secureboot-policy (?)) asking to disable the EFI Secure Boot
for next boot, stating that otherwise kernel modules for third parties
might become unusable.

But some time ago (probably after the last shim-signed upload) I
enrolled the DKMS signing keys via the instructions from
<https://wiki.debian.org/SecureBoot#DKMS_and_Secure_Boot>, so I'd
expect no such debconf message to pop up, as I was initially very
confused, and thought there was perhaps a breaking change in that
shim-signed version that would cause that, and that the next boot
would cause modules to stop working, which would instead lower
the security of the system.

Thanks,
Guillem

Reply via email to