pool/shim
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 971203 from home:lnussel:branches:Base:System

Browse Source 
- use common SBAT values (boo#1193282)

OBS-URL: https://build.opensuse.org/request/show/971203
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=188
This commit is contained in:
Joey Lee 2022-07-14 02:23:22 +00:00 committed by Git OBS Bridge
parent 7410f7aef0
commit 20e705b979
2 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
shim.changes
View File

@ -154,6 +154,11 @@ Tue Jun 28 04:03:45 UTC 2022 - Joey Lee <jlee@suse.com>
- Updated generate-vendor-dbx.sh script for generating a vendor-dbx.bin
file which includes all .der for testing environment.
-------------------------------------------------------------------
Tue Apr 12 06:35:16 UTC 2022 - Ludwig Nussel <lnussel@suse.de>
- use common SBAT values (boo#1193282)
-------------------------------------------------------------------
Thu Jul 1 04:07:03 UTC 2021 - Gary Ching-Pang Lin <glin@suse.com>

18
shim.spec
View File

@ -35,6 +35,13 @@
%endif
%endif
%if %{defined sbat_distro}
# SBAT metadata
%define sbat_generation 1
%else
%{error please define sbat_distro, sbat_distro_summary and sbat_distro_url}
%endif
Name: shim
Version: 15.6
Release: 0
@ -127,17 +134,10 @@ The source code of UEFI shim loader
%patch100 -p1
%build
%if 0%{?sbat_generation}
# generate the vendor SBAT metadata
%if 0%{?is_opensuse} == 1 || 0%{?sle_version} == 0
distro_id="opensuse"
distro_name="The openSUSE project"
%else
distro_id="sle"
distro_name="SUSE Linux Enterprise"
echo "shim.%{sbat_distro},%{sbat_generation},%{sbat_distro_summary},%{name},%{version},%{sbat_distro_url}" > data/sbat.vendor.csv
%endif
distro_sbat=1
sbat="shim.${distro_id},${distro_sbat},${distro_name},%{name},%{version},mail:security-team@suse.de"
echo "${sbat}" > data/sbat.vendor.csv
# first, build MokManager and fallback as they don't depend on a
# specific certificate