Disable annobin stack protection check

Disable annobin stack check since grub's initialization code doesn't
support it.

Resolves: RHEL-89464
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
This commit is contained in:
Leo Sandoval 2025-10-27 13:24:31 -06:00
parent b19bdcb0c2
commit 763d340eb1
2 changed files with 13 additions and 1 deletions

View File

@ -17,7 +17,7 @@
Name: grub2
Epoch: 1
Version: 2.12
Release: 31%{?dist}
Release: 32%{?dist}
Summary: Bootloader with support for Linux, Multiboot and more
License: GPL-3.0-or-later
URL: http://www.gnu.org/software/grub/
@ -574,6 +574,10 @@ fi
%endif
%changelog
* Tue Oct 28 2025 Leo Sandoval <lsandova@redhat.com> 2.12-32
- Disable annobin stack protection check
- Resolves: #RHEL-89464
* Tue Oct 7 2025 Nicolas Frayer <nfrayer@redhat.com> 2.12-31
- spec: Update signing key to redhatsecureboot802
- Resolves: #RHEL-116730

8
rpminspect.yaml Normal file
View File

@ -0,0 +1,8 @@
# additional rpminspect configuration for this branch
---
# Disable annobin stack check since grub's initialization code doesn't support it
annocheck:
extra_opts:
- hardened: --skip-stack-prot --ignore-unknown --verbose