Accepting request 993204 from devel:openSUSE:Factory
OBS-URL: https://build.opensuse.org/request/show/993204 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=103
This commit is contained in:
commit
00c82fc0f9
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Fri Aug 5 05:25:16 UTC 2022 - Joey Lee <jlee@suse.com>
|
||||
|
||||
- Add logic to shim.spec for detecting --set-sbat-policy option before
|
||||
using mokutil to set sbat policy. (bsc#1202120)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Jul 29 02:36:36 UTC 2022 - Joey Lee <jlee@suse.com>
|
||||
|
||||
|
@ -308,7 +308,8 @@ is_efi () {
|
||||
# run mokutil for setting sbat policy to latest mode
|
||||
SBAT_POLICY=/sys/firmware/efi/efivars/SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23
|
||||
if is_efi; then
|
||||
if [ ! -f "$SBAT_POLICY" ]; then
|
||||
if [ ! -f "$SBAT_POLICY" ] && mokutil -h | grep -q "set-sbat-policy"; then
|
||||
# Only apply CA check on the kernel package certs (bsc#1173115)
|
||||
mokutil --set-sbat-policy latest
|
||||
fi
|
||||
fi
|
||||
|
Loading…
Reference in New Issue
Block a user