efi: Add iMac Pro 2017 to uefi skip cert quirk

commit 0be56a116220f9e5731a6609e66a11accfe8d8e2 upstream.

The iMac Pro 2017 is also a T2 Mac. Thus add it to the list of uefi skip
cert.

Cc: stable@vger.kernel.org
Fixes: 155ca952c7ca ("efi: Do not import certificates from UEFI Secure Boot for T2 Macs")
Link: https://lore.kernel.org/linux-integrity/9D46D92F-1381-4F10-989C-1A12CD2FFDD8@live.com/
Signed-off-by: Aditya Garg <gargaditya08@live.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

diff --git a/security/integrity/platform_certs/load_uefi.c b/security/integrity/platform_certs/load_uefi.c
index 185c609c6e380893726610f0e6040564886a3b63..d2f2c3936277ab05c7dfedb50e42e88f1d6d012b 100644 (file)
--- a/security/integrity/platform_certs/load_uefi.c
+++ b/security/integrity/platform_certs/load_uefi.c
@@ -34,6 +34,7 @@ static const struct dmi_system_id uefi_skip_cert[] = {
        { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "MacPro7,1") },
        { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMac20,1") },
        { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMac20,2") },
+       { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMacPro1,1") },
        { }
 };