ACK: [PATCH 2/2] securebootcert: move to UNSAFE category

[Alex Hung]

On 2018-01-07 11:24 PM, Ivan Hu wrote:
> Adding the AuditMode and DeployedMode read-only test, need to actually set
> variable by UEFI runtime services through firmware. So move this test to UNSAFE.
> 
> Signed-off-by: Ivan Hu <ivan.hu at canonical.com>
> ---
>   src/uefi/securebootcert/securebootcert.c | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/src/uefi/securebootcert/securebootcert.c b/src/uefi/securebootcert/securebootcert.c
> index 60fc489..45361fa 100644
> --- a/src/uefi/securebootcert/securebootcert.c
> +++ b/src/uefi/securebootcert/securebootcert.c
> @@ -620,6 +620,6 @@ static fwts_framework_ops securebootcert_ops = {
>   	.minor_tests = securebootcert_tests
>   };
>   
> -FWTS_REGISTER("securebootcert", &securebootcert_ops, FWTS_TEST_ANYTIME, FWTS_FLAG_TEST_UEFI | FWTS_FLAG_BATCH | FWTS_FLAG_ROOT_PRIV)
> +FWTS_REGISTER("securebootcert", &securebootcert_ops, FWTS_TEST_ANYTIME, FWTS_FLAG_TEST_UEFI | FWTS_FLAG_UNSAFE | FWTS_FLAG_ROOT_PRIV)
>   
>   #endif
> 

Acked-by: Alex Hung <alex.hung at canonical.com>