windows/ubuntu dual boot

[Jeffrey Walton]

On Wed, Aug 21, 2024 at 8:46 PM Stefan Fuhrmann
<stefan at fuhrmann.homedns.org> wrote:
>
> In the press today was explained that there is an issue with the last windows update.
>
> There is no fix at the moment.
>
> A workaround is to disable "secure boot in bios"
>
> You should be able to start the linux and disable "SBAT-Policy"
>
> sudo mokutil --set-sbat-policy delete
>
> After that you should be able to boot the distris
>
> https://askubuntu.com/questions/1523438/verifying-shim-sbat-data-failed-security-policy-violation

Interesting. According to MS documentation at
<https://support.microsoft.com/en-us/topic/august-13-2024-security-update-kb5041160-3e8026f2-bb4c-4c1c-9855-d41e1b5b1bd9>,
the August updates should not affect dual boot systems:

    [Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware
    Interface (EFI)] This update applies SBAT to systems that run Windows.
    This stops vulnerable Linux EFI (Shim bootloaders) from running. This
    SBAT update will not apply to systems that dual-boot Windows and Linux.
    After the SBAT update is applied, older Linux ISO images might not
    boot. If this occurs, work with your Linux vendor to get an updated ISO
    image.

Jeff