Comment 40 for bug 1921539

Did test the one in proposed, it does failed with new shim + sb on.

I prepare a ppa with updated fwupd.

sudo add-apt-repository ppa:ycheng-twn/fwupd-bionic-sbat-3

the unsigned-efi does have a sbat section:

---

~# objdump -h /usr/lib/fwupd/efi/fwupdx64.efi

/usr/lib/fwupd/efi/fwupdx64.efi: file format pei-x86-64

Sections:
Idx Name Size VMA LMA File off Algn
  0 .text 00007a2b 0000000000004000 0000000000004000 00000400 2**4
                  CONTENTS, ALLOC, LOAD, READONLY, CODE
  1 .reloc 0000000a 000000000000c000 000000000000c000 00008000 2**0
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  2 .data 00002ea8 000000000000d000 000000000000d000 00008200 2**5
                  CONTENTS, ALLOC, LOAD, DATA
  3 .sbat 000000ec 0000000000010000 0000000000010000 0000b200 2**0
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  4 .dynamic 00000150 0000000000011000 0000000000011000 0000b400 2**3
                  CONTENTS, ALLOC, LOAD, DATA
  5 .rela 00000e70 0000000000012000 0000000000012000 0000b600 2**3
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  6 .rela.plt 00000018 0000000000012e70 0000000000012e70 0000c670 2**3
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  7 .dynsym 00000288 0000000000013000 0000000000013000 0000ca00 2**3
                  CONTENTS, ALLOC, LOAD, READONLY, DATA