Update config

config.yaml

@@ -274,11 +274,11 @@ actions:
       - target: "spec"
         find: |
               %if 0%{?centos}
-                      SBATsuffix="centos"
+              %global sbat_suffix centos
               %else
         replace: |
               %if 0%{?centos}
-                      SBATsuffix="rhel"
+              %global sbat_suffix rhel
               %else
         count: 1
       - target: "uki.sbat.template"
@@ -299,6 +299,16 @@ actions:
               kernel-uki-virt-addons.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt-addons,@KVER,mailto:secalert@redhat.com
               kernel-uki-virt-addons.almalinux,1,AlmaLinux,kernel-uki-virt-addons,@KVER,mailto:security@almalinux.org
 
+        count: 1
+      - target: "kernel.sbat.template"
+        find: |
+              sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
+              kernel.@SBAT_SUFFIX,1,Red Hat,kernel-core,@KVER,mailto:secalert@redhat.com
+        replace: |
+              sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
+              kernel.@SBAT_SUFFIX,1,Red Hat,kernel-core,@KVER,mailto:secalert@redhat.com
+              kernel.almalinux,1,AlmaLinux,kernel-core,@KVER,mailto:security@almalinux.org
+
         count: 1
       - target: "x509.genkey.centos"
         find: |
@@ -373,10 +383,16 @@ actions:
               Source104: rhelima.x509
               Source105: rhelima_centos.x509
               Source106: fedoraimaca.x509
+          - |
+              # Temporary use redhatsecureboot504 for x86 UKI, see RHEL-122230
+              Source153: redhatsecureboot504.cer
       - target: "kernel*zfcpdump*.config"
         lines:
           - "# CONFIG_FS_POSIX_ACL is not set"
 
+  - delete_files:
+      - file_name: "redhatsecureboot504.cer"
+
   - changelog_entry:
       - name: "Eduard Abdullin"
         email: "eabdullin@almalinux.org"