[Bug 1094014] Re: [Quantal] forbids to loading mormal.mod in UEFI security boot

[Colin Watson]

You must include all the modules you need in your signed image (i.e. on
the grub-mkimage command line).  GRUB has no provision for verifying
module signatures, so loading modules would amount to reading and
executing unsigned code in the same security context as a signed image,
which is not a sensible thing to do.

You can find the list of modules we include in our pre-signed images in
the grub2 source package, specifically debian/build-efi-images.

** Changed in: grub2 (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1094014

Title:
  [Quantal] forbids to loading mormal.mod in UEFI security boot

Status in “grub2” package in Ubuntu:
  Invalid

Bug description:
  I follow the step in https://wiki.ubuntu.com/UEFI/SecureBoot to do security boot test on my machine.
   
  I have signed grubx64.efi and put it on /boot/efi/efi/ubuntu/grubx64.efi, I also add test-cert.der to KEK and DB.

  Then I enable security boot and boot to shell, Once I run grubx64.efi, the system report following error:
  error: Secure Boot forbids loading module from (hd0,gpt2)/boot/grub/x86_64-efi/normal.mod.

  how can I resolve it ?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1094014/+subscriptions