SecureBootConfigDxe/SecureBootConfigImpl.c: add default for SB state

Fixes an issue where the setting would not be restored to the default value on pressing F9. Signed-off-by: Michał Kopeć <[email protected]>
Dasharo · Nov 9, 2023 · f32f651 · f32f651
1 parent 228b32e
commit f32f651
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigImpl.c b/SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigImpl.c
@@ -5010,7 +5010,8 @@ SecureBootCallback (
       break;
     }
   } else if (Action == EFI_BROWSER_ACTION_DEFAULT_STANDARD) {
-    if (QuestionId == KEY_HIDE_SECURE_BOOT) {
+    switch (QuestionId) {
+    case KEY_HIDE_SECURE_BOOT: {
       GetVariable2 (EFI_PLATFORM_KEY_NAME, &gEfiGlobalVariableGuid, (VOID**)&Pk, NULL);
       if (Pk == NULL) {
         IfrNvData->HideSecureBoot = TRUE;
@@ -5019,6 +5020,14 @@ SecureBootCallback (
         IfrNvData->HideSecureBoot = FALSE;
       }
       Value->b = IfrNvData->HideSecureBoot;
+      break;
+    }
+    case KEY_SECURE_BOOT_ENABLE: {
+      Value->u8 = FixedPcdGet8 (PcdSecureBootDefaultEnable);
+      break;
+    }
+    default:
+      break;
     }
   } else if (Action == EFI_BROWSER_ACTION_FORM_CLOSE) {
     //