From fd5d3fea1e540e9275207d2a9d3bb20181ca904f Mon Sep 17 00:00:00 2001
From: Stewart Smith <stewart@linux.vnet.ibm.com>
Date: Wed, 7 Feb 2018 21:28:17 -0600
Subject: stb: Enforce secure boot if called before libstb initialized

Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>
---
 libstb/secureboot.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/libstb/secureboot.c b/libstb/secureboot.c
index 94be24b..921aba7 100644
--- a/libstb/secureboot.c
+++ b/libstb/secureboot.c
@@ -183,6 +183,7 @@ int secureboot_verify(enum resource_id id, void *buf, size_t len)
         if (!secure_init) {
                 prlog(PR_WARNING, "container NOT VERIFIED, resource_id=%d "
                       "secureboot not yet initialized\n", id);
+		secureboot_enforce();
 		return -1;
         }
 
-- 
cgit v1.1