> > The LOAD_UEFI_KEYS code isn't doing anything special here - it's just > trying to read some variables. If we simply disable that then the > expectation would be that reading the same variables from userland would > trigger the same failure. So the question is which of the variables that > LOAD_UEFI_KEYS accesses is triggering the failure, and what's special > about that? If it's a specific variable GUID or name that's failing, we > should block that on Apple hardware in order to avoid issues caused by > userland performing equivalent accesses. The size log seems to be extra when crash occurs integrity: Couldn't get size: 0x8000000000000015 integrity: MODSIGN: Couldn't get UEFI db list efi: EFI Runtime Services are disabled! integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get UEFI dbx list integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get mokx list integrity: Couldn't get size: 0x80000000