Bug#1032375: memtest86+: fails to work with Secure Boot enabled

[Russell Coker]

Package: memtest86+
Version: 6.10-4
Severity: normal

If you select the EFI version of memtest86+ from GRUB when Secure Boot is
enabled then it gives the message "error: bad shim signature" and fails back
to GRUB.

Please provide a signed version so Secure Boot doesn't have to be disabled to
run it.

-- System Information:
Debian Release: bookworm/sid
APT prefers testing-debug
APT policy: (500, 'testing-debug'), (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-5-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Enforcing - Policy name: default

memtest86+ depends on no packages.

memtest86+ recommends no packages.

Versions of packages memtest86+ suggests:
pn grub-efi | grub-pc | grub-legacy <none>
pn memtester <none>
ii mtools 4.0.33-1+really4.0.32-1

-- no debconf information

[Felix Zielcke]

Control: severity -1 wishlist

Am Sonntag, dem 05.03.2023 um 23:20 +1100 schrieb Russell Coker:
> Package: memtest86+
> Version: 6.10-4
> Severity: normal
>
> If you select the EFI version of memtest86+ from GRUB when Secure
> Boot is
> enabled then it gives the message "error: bad shim signature" and
> fails back
> to GRUB.
>
> Please provide a signed version so Secure Boot doesn't have to be
> disabled to
> run it.
>

Hi,

this has been already talked on IRC in #debian-efi.
First step is to get the ok from the shim-review process.
I created already an issue here:

https://github.com/rhboot/shim-review/issues/314