From: Paul Menzel <pmenzel@molgen.mpg.de>
To: Josh Boyer <jwboyer@fedoraproject.org>
Cc: linux-security-module@vger.kernel.org,
Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Subject: Re: load_uefi_certs: Couldn't get size: 0x800000000000000e
Date: Wed, 30 Oct 2019 09:57:59 +0100 [thread overview]
Message-ID: <b22a8c89-c843-f688-a723-df93430b6382@molgen.mpg.de> (raw)
In-Reply-To: <3f48aab2-7d8e-ee9b-c362-3b7f84609abe@molgen.mpg.de>
Dear Josh,
On 04.10.19 14:24, Paul Menzel wrote:
> On a Dell Latitude E7250 with a self-built Linux 5.4-rc1 the error message
> below is printed on the screen.
>
> [ 0.658664] Couldn't get size: 0x800000000000000e
>
> Here are the message from the ring buffer (`dmesg`).
>
> ```
> [ 0.658329] calling load_uefi_certs+0x0/0x217 @ 1
> [ 0.658472] integrity: Loading X.509 certificate: UEFI:db
> [ 0.658544] integrity: Loaded X.509 cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53'
> [ 0.658545] integrity: Loading X.509 certificate: UEFI:db
> [ 0.658606] integrity: Loaded X.509 cert 'Microsoft Corporation UEFI CA 2011: 13adbf4309bd82709c8cd54f316ed522988a1bd4'
> [ 0.658664] Couldn't get size: 0x800000000000000e
> [ 0.658689] Couldn't get UEFI MokListRT
> [ 0.658768] initcall load_uefi_certs+0x0/0x217 returned 0 after 426 usecs
> ```
>
> Could this error message be improved, to give the user a hint, what is wrong,
> what the consequences are, and what should be done?
>
> Should the message below be `pr_error`, and the other error debug?
>
> pr_info("Couldn't get UEFI MokListRT\n");
>
> Please find the Linux messages and (`make savedefconfig`) configuration
> attached.
>
> Do you know more about the reason, and if the Linux code can handle it more
> gracefully?
>
> Commit 15ea0e1e (efi: Import certificates from UEFI Secure Boot) was already
> added in Linux 5.0, and I do not remember seeing it with Debian’s default
> Linux kernel. No idea, what is configured differently, or I just missed it.
I am still getting this with Linux 5.4-rc5.
Kind regards,
Paul
parent reply other threads:[~2019-10-30 8:58 UTC|newest]
Thread overview: expand[flat|nested] mbox.gz Atom feed
[parent not found: <3f48aab2-7d8e-ee9b-c362-3b7f84609abe@molgen.mpg.de>]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=b22a8c89-c843-f688-a723-df93430b6382@molgen.mpg.de \
--to=pmenzel@molgen.mpg.de \
--cc=jwboyer@fedoraproject.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).