progress snapshot

config/secureboot.sh

@@ -2,7 +2,7 @@
 # Secure Boot configuration script for football system
 # This script ensures Secure Boot is properly configured
 
-set -e
+set -euo pipefail
 
 echo "Configuring Secure Boot..."
 
@@ -55,9 +55,9 @@ EOF
 
 # Ensure kernel modules are signed
 echo "Verifying kernel module signing..."
-for module in /lib/modules/$(uname -r)/*.ko; do
+for module in "/lib/modules/$(uname -r)"/*.ko; do
     if [ -f "$module" ]; then
-        sig=$(modinfo "$module" 2>/dev/null | grep -i "signature:" | wc -l)
+        sig=$(modinfo "$module" 2>/dev/null | grep -ci "signature:")
         if [ "$sig" -eq 0 ]; then
             echo "WARNING: Module $module is not signed"
         fi