1. Reset system when user changes secure boot state in secure boot configuration...

[mirror_edk2.git] / SecurityPkg / VariableAuthenticated / RuntimeDxe / AuthService.c

diff --git a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
index d6df32affc27f9ca8c3de4753b37a539741db300..d1aeab8bfc26aeeb06428b7c0dff8762356b43cd 100644 (file)
--- a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
+++ b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
@@ -323,7 +323,7 @@ AutenticatedVariableServiceInitialize (
   // If "SecureBootEnable" variable is SECURE_BOOT_ENABLE and in USER_MODE, Set "SecureBoot" variable to SECURE_BOOT_MODE_ENABLE.\r
   // If "SecureBootEnable" variable is SECURE_BOOT_DISABLE, Set "SecureBoot" variable to SECURE_BOOT_MODE_DISABLE.\r
   //\r
-  SecureBootEnable = SECURE_BOOT_MODE_DISABLE;\r
+  SecureBootEnable = SECURE_BOOT_DISABLE;\r
   FindVariable (EFI_SECURE_BOOT_ENABLE_NAME, &gEfiSecureBootEnableDisableGuid, &Variable, &mVariableModuleGlobal->VariableGlobal, FALSE);\r
   if (Variable.CurrPtr != NULL) {\r
     SecureBootEnable = *(GetVariableDataPtr (Variable.CurrPtr));\r
@@ -331,7 +331,7 @@ AutenticatedVariableServiceInitialize (
     //\r
     // "SecureBootEnable" not exist, initialize it in USER_MODE.\r
     //\r
-    SecureBootEnable = SECURE_BOOT_MODE_ENABLE;\r
+    SecureBootEnable = SECURE_BOOT_ENABLE;\r
     Status = UpdateVariable (\r
                EFI_SECURE_BOOT_ENABLE_NAME,\r
                &gEfiSecureBootEnableDisableGuid,\r