We should be checking both mok and the system's SB settings

When we call hook_system_services(), we're currently only checking mok's
setting.  We should use secure_mode() instead so it'll check both.

Signed-off-by: Peter Jones <pjones@redhat.com>

diff --git a/shim.c b/shim.c
index 537177d0525ad6e68b1b0a2f80dfb3ca46a765df..9d0d884078ec27974847d9c925ba9bbcf62dae40 100644 (file)
--- a/shim.c
+++ b/shim.c
@@ -1718,7 +1718,7 @@ EFI_STATUS efi_main (EFI_HANDLE image_handle, EFI_SYSTEM_TABLE *passed_systab)
        /*
         * Tell the user that we're in insecure mode if necessary
         */
-       if (insecure_mode) {
+       if (!secure_mode()) {
                Print(L"Booting in insecure mode\n");
                uefi_call_wrapper(BS->Stall, 1, 2000000);
        } else {