From 6d64423f7b0e45ec19b1e75d7bd28e7a69f95094 Mon Sep 17 00:00:00 2001 From: eabdullin Date: Tue, 28 Oct 2025 13:19:02 +0300 Subject: [PATCH] Update config --- config.yaml | 20 ++++++++++++++++++-- 1 file changed, 18 insertions(+), 2 deletions(-) diff --git a/config.yaml b/config.yaml index eb6c4e8..59205a3 100644 --- a/config.yaml +++ b/config.yaml @@ -274,11 +274,11 @@ actions: - target: "spec" find: | %if 0%{?centos} - SBATsuffix="centos" + %global sbat_suffix centos %else replace: | %if 0%{?centos} - SBATsuffix="rhel" + %global sbat_suffix rhel %else count: 1 - target: "uki.sbat.template" @@ -299,6 +299,16 @@ actions: kernel-uki-virt-addons.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt-addons,@KVER,mailto:secalert@redhat.com kernel-uki-virt-addons.almalinux,1,AlmaLinux,kernel-uki-virt-addons,@KVER,mailto:security@almalinux.org + count: 1 + - target: "kernel.sbat.template" + find: | + sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md + kernel.@SBAT_SUFFIX,1,Red Hat,kernel-core,@KVER,mailto:secalert@redhat.com + replace: | + sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md + kernel.@SBAT_SUFFIX,1,Red Hat,kernel-core,@KVER,mailto:secalert@redhat.com + kernel.almalinux,1,AlmaLinux,kernel-core,@KVER,mailto:security@almalinux.org + count: 1 - target: "x509.genkey.centos" find: | @@ -373,10 +383,16 @@ actions: Source104: rhelima.x509 Source105: rhelima_centos.x509 Source106: fedoraimaca.x509 + - | + # Temporary use redhatsecureboot504 for x86 UKI, see RHEL-122230 + Source153: redhatsecureboot504.cer - target: "kernel*zfcpdump*.config" lines: - "# CONFIG_FS_POSIX_ACL is not set" + - delete_files: + - file_name: "redhatsecureboot504.cer" + - changelog_entry: - name: "Eduard Abdullin" email: "eabdullin@almalinux.org"