From e8903bb7bf3f975ce8d1986bdbbaaf05c29c0e2b Mon Sep 17 00:00:00 2001 From: "Zhang, Chao B" Date: Wed, 4 May 2016 10:32:09 +0800 Subject: SecurityPkg: SecureBootConfigDxe: Disable SecureBoot Enable/Disable in some case Disable SecureBoot Enable/Disable feature when PhysicalPresence is not available, Since SecureBootEnable is protected with PhysicalPresence. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Chao Zhang Reviewed-by: Fu Siyuan --- .../VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'SecurityPkg/VariableAuthenticated') diff --git a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr index fefbfbf..02ddf4a 100644 --- a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr +++ b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfig.vfr @@ -41,7 +41,7 @@ formset // // Display of Check Box: Attempt Secure Boot // - grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1; + grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1 OR NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1; checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot, questionid = KEY_SECURE_BOOT_ENABLE, prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT), -- cgit v1.1