[Bug 2084104] Re: UEFI GRUB2 enforces NX even with a non-NX shim when Secure Boot is disabled

[Rovano]

Hello, I probably have a similar or the same problem.

ad GPU vs EFI
If I turn on UEFI boot, the screen is reduced from fullscreen on monitor to a window on the monitor in BIOS and Grub. But I don't mind. This is probably how it works with the GPU, GOP driver and BIOS.

Furthermore, I have the correct or the same resolution as normal.


I tried the variant with a secure boot ON.

Windows still the same error message. error: cannot load image

After restarting...
Linux with debug peimage:
booting a command list

loader/efi/peimage.c:210:peimage NX policy violation
error: cannot load image.

press any key to continue...

If I try to boot the Linux kernel from Grub right after the Windows boot fails, I get a message:
booting a command list
error: first load a kernel

or
loader/efi/peimage.c:829:peimage:
error: cannot load multiple images

I wrote something about my case here. It's just messy.

https://www.reddit.com/r/Ubuntu/comments/1fz1t4z/grub_212_in_oracular_is_unable_to_boot_windows/

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/2084104

Title:
  UEFI GRUB2 enforces NX even with a non-NX shim when Secure Boot is
  disabled

Status in grub2 package in Ubuntu:
  In Progress

Bug description:
  This still needs to be verified, but I have a strong hunch that this
  is a bug...

  Please see final comments on
  https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/2078307

  What is likely happening is that shim does not export MokPolicy when
  Secure Boot is disabled, thus GRUB decides that it must always enforce
  NX.

  It might be a more sensible default to never enforce NX if Secure Boot
  is off.

  The only obvious impact right now is Windows chainloading from GRUB
  when Secure Boot is disabled.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/2084104/+subscriptions