stub: do not assumr secure boot on systems without support for it

1 files changed, 3 insertions, 3 deletions

diff --git a/src/efi/stub.c b/src/efi/stub.c
index 67a2661..51d215f 100644
--- a/src/efi/stub.c
+++ b/src/efi/stub.c
@@ -31,7 +31,7 @@ EFI_STATUS efi_main(EFI_HANDLE image, EFI_SYSTEM_TABLE *sys_table) {
         CHAR16 *loaded_image_path;
         CHAR8 *b;
         UINTN size;
-        BOOLEAN secure = TRUE;
+        BOOLEAN secure = FALSE;
         CHAR8 *sections[] = {
                 (UINT8 *)".cmdline",
                 (UINT8 *)".linux",
@@ -64,8 +64,8 @@ EFI_STATUS efi_main(EFI_HANDLE image, EFI_SYSTEM_TABLE *sys_table) {
         loaded_image_path = DevicePathToStr(loaded_image->FilePath);
 
         if (efivar_get_raw(&global_guid, L"SecureBoot", &b, &size) == EFI_SUCCESS) {
-                if (*b == 0)
-                        secure = FALSE;
+                if (*b > 0)
+                        secure = TRUE;
                 FreePool(b);
         }