patch

diff --git a/sbat.c b/sbat.c
index b9f228b..408bb1a 100644
--- a/sbat.c
+++ b/sbat.c
@@ -183,6 +183,10 @@ verify_sbat_helper(list_t *local_sbat_var, size_t n, struct sbat_section_entry *
 	list_t *pos = NULL;
 	EFI_STATUS efi_status = EFI_SUCCESS;
 	struct sbat_var_entry *sbat_var_entry;
+	struct sbat_var_entry temporary_grub_sbat_entry = {
+		"grub",
+		"4",
+	};
 
 	if (list_empty(local_sbat_var)) {
 		dprint(L"%s variable not present\n", SBAT_VAR_NAME);
@@ -199,6 +203,10 @@ verify_sbat_helper(list_t *local_sbat_var, size_t n, struct sbat_section_entry *
 			if (found)
 				break;
 		}
+		bool ignored;
+		efi_status = verify_single_entry(entries[i], &temporary_grub_sbat_entry, &ignored);
+		if (EFI_ERROR(efi_status))
+			goto out;
 	}
 
 out: