1config BR2_TARGET_SHIM 2 bool "shim" 3 # it includes gnu-efi 4 depends on BR2_PACKAGE_GNU_EFI_ARCH_SUPPORTS 5 help 6 Boot loader to chain-load signed boot loaders under Secure 7 Boot. 8 9 This package provides a minimalist boot loader which allows 10 verifying signatures of other UEFI binaries against either 11 the Secure Boot DB/DBX or against a built-in signature 12 database. Its purpose is to allow a small, 13 infrequently-changing binary to be signed by the UEFI CA, 14 while allowing an OS distributor to revision their main 15 bootloader independently of the CA. 16 17 https://github.com/rhboot/shim 18