Comment 11 for bug 1888033

I have double-checked that there is nothing in the boot configuration that is configured to modify the contents of efi.img (which contains only the signed EFI executables - modification of which would cause the image to subsequently fail to boot). Any modification of this image must be coming from outside, which is not something we can account for.