almalinux/lorax
14
1
Fork 0
Code Issues Pull Requests Releases Activity

Add SB lockdown to EFI grub menu (#1030495)

Browse Source 
Resolves: rhbz#1030495
This commit is contained in:
Brian C. Lane 2013-11-15 13:52:44 -08:00
parent 7871eb592a
commit ca3d374a64
4 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
share/config_files/x86/grub2-efi.cfg
View File

@ -37,4 +37,7 @@ submenu 'Troubleshooting -->' {
linuxefi @KERNELPATH@ @ROOT@ rescue quiet linuxefi @KERNELPATH@ @ROOT@ rescue quiet
initrdefi @INITRDPATH@ initrdefi @INITRDPATH@
} }
menuentry '@PRODUCT@ @VERSION@ Secure Boot Lockdown' {
chainloader /EFI/BOOT/lockdown.efi
}
} }

1
share/efi.tmpl
View File

@ -9,6 +9,7 @@ mkdir ${EFIBOOTDIR}
mkdir ${EFIBOOTDIR}/fonts/ mkdir ${EFIBOOTDIR}/fonts/
install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi
install boot/efi/EFI/*/MokManager.efi ${EFIBOOTDIR}/ install boot/efi/EFI/*/MokManager.efi ${EFIBOOTDIR}/
install usr/share/shim/lockdown.efi ${EFIBOOTDIR}/
install boot/efi/EFI/*/gcdx64.efi ${EFIBOOTDIR}/grubx64.efi install boot/efi/EFI/*/gcdx64.efi ${EFIBOOTDIR}/grubx64.efi
install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/ install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/

3
share/live/config_files/x86/grub2-efi.cfg
View File

@ -37,4 +37,7 @@ submenu 'Troubleshooting -->' {
linuxefi @KERNELPATH@ @ROOT@ rd.live.image rescue quiet linuxefi @KERNELPATH@ @ROOT@ rd.live.image rescue quiet
initrdefi @INITRDPATH@ initrdefi @INITRDPATH@
} }
menuentry '@PRODUCT@ @VERSION@ Secure Boot Lockdown' {
chainloader /EFI/BOOT/lockdown.efi
}
} }

2
share/live/efi.tmpl
View File

@ -8,6 +8,8 @@ APPLE_EFI_DISKNAME=inroot+"/usr/share/pixmaps/bootloader/fedora-media.vol"
mkdir ${EFIBOOTDIR} mkdir ${EFIBOOTDIR}
mkdir ${EFIBOOTDIR}/fonts/ mkdir ${EFIBOOTDIR}/fonts/
install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi
install boot/efi/EFI/*/MokManager.efi ${EFIBOOTDIR}/
install usr/share/shim/lockdown.efi ${EFIBOOTDIR}/
install boot/efi/EFI/*/gcdx64.efi ${EFIBOOTDIR}/grubx64.efi install boot/efi/EFI/*/gcdx64.efi ${EFIBOOTDIR}/grubx64.efi
install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/ install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/