From 5f95f2eaf5a6d85ec3803795319896aa8b039b72 Mon Sep 17 00:00:00 2001 From: Leo Sandoval Date: Wed, 29 Oct 2025 10:31:11 -0600 Subject: [PATCH] Disable annobin stack protection check Disable annobin stack check since grub's initialization code doesn't support it. Resolves: #RHEL-45712 Signed-off-by: Leo Sandoval --- grub2.spec | 6 +++++- rpminspect.yaml | 8 ++++++++ 2 files changed, 13 insertions(+), 1 deletion(-) create mode 100644 rpminspect.yaml diff --git a/grub2.spec b/grub2.spec index 6d580db..7d910d8 100644 --- a/grub2.spec +++ b/grub2.spec @@ -16,7 +16,7 @@ Name: grub2 Epoch: 1 Version: 2.06 -Release: 115%{?dist} +Release: 116%{?dist} Summary: Bootloader with support for Linux, Multiboot and more License: GPLv3+ URL: http://www.gnu.org/software/grub/ @@ -538,6 +538,10 @@ fi %endif %changelog +* Tue Oct 28 2025 Leo Sandoval 2.06-116 +- Disable annobin stack protection check +- Resolves: #RHEL-45712 + * Mon Sep 08 2025 Leo Sandoval 2.06-115 - Fix the fallback mechanism when menu entries fail to boot - Resolves: RHEL-109456 diff --git a/rpminspect.yaml b/rpminspect.yaml new file mode 100644 index 0000000..4e12513 --- /dev/null +++ b/rpminspect.yaml @@ -0,0 +1,8 @@ +# additional rpminspect configuration for this branch + +--- +# Disable annobin stack check since grub's initialization code doesn't support it +annocheck: + extra_opts: + - hardened: --skip-stack-prot --ignore-unknown --verbose +