From e8903bb7bf3f975ce8d1986bdbbaaf05c29c0e2b Mon Sep 17 00:00:00 2001 From: "Zhang, Chao B" Date: Wed, 4 May 2016 10:32:09 +0800 Subject: [PATCH] SecurityPkg: SecureBootConfigDxe: Disable SecureBoot Enable/Disable in some case Disable SecureBoot Enable/Disable feature when PhysicalPresence is not available, Since SecureBootEnable is protected with PhysicalPresence. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Chao Zhang Reviewed-by: Fu Siyuan --- .../SecureBootConfigDxe/SecureBootConfig.vfr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr index fefbfbfd06..02ddf4ad89 100644 --- a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr +++ b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr @@ -41,7 +41,7 @@ formset // // Display of Check Box: Attempt Secure Boot // - grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1; + grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1 OR NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1; checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot, questionid = KEY_SECURE_BOOT_ENABLE, prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT),