Make verifier run on next boot only

In its current state, the verifier does not spcify a /bootmode, which causes it to use the default behavior, "persistent." As a result, on an incompatible hardware configuration, the system may get stuck in a boot loop. (Ask me how I know!)

This change specifies that the verifier should only run on the next boot, preventing a user from getting their computer stuck in a situation that Windows cannot resolve on its own.
This commit is contained in:
Ryan Bahm 2021-03-17 13:46:57 -07:00 committed by GitHub
parent 81cea15500
commit b04ccdc2cd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -678,7 +678,7 @@ function CheckDriverCompat
if($verifier_state.ToString().Contains("No drivers are currently verified.")) if($verifier_state.ToString().Contains("No drivers are currently verified."))
{ {
LogAndConsole "Enabling Driver verifier" LogAndConsole "Enabling Driver verifier"
verifier.exe /flags 0x02000000 /all /log.code_integrity verifier.exe /flags 0x02000000 /all /bootmode oneboot /log.code_integrity
LogAndConsole "Enabling Driver Verifier and Rebooting system" LogAndConsole "Enabling Driver Verifier and Rebooting system"
Log $verifier_state Log $verifier_state