rpms/grub2
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Make everything under /boot/efi be mode 0700, since that's what FAT will

Browse Source 
show anyway.

Signed-off-by: Peter Jones <pjones@redhat.com>
This commit is contained in:
Peter Jones 2018-01-18 14:12:52 -05:00
parent 6f1e3d5698
commit 8cceee7ebe
2 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
grub.macros
View File

@ -474,10 +474,10 @@ touch ${RPM_BUILD_ROOT}/boot/%{name}/grub.cfg \
%{expand:%%files %{1}} \ %{expand:%%files %{1}} \
%defattr(-,root,root,-) \ %defattr(-,root,root,-) \
%config(noreplace) %{_sysconfdir}/%{name}-efi.cfg \ %config(noreplace) %{_sysconfdir}/%{name}-efi.cfg \
%dir %attr(0755,root,root)/boot/efi/EFI/%{efidir} \ %dir %attr(0700,root,root)/boot/efi/EFI/%{efidir} \
/boot/efi/EFI/%{efidir}/%{2} \ %attr(0700,root,root)/boot/efi/EFI/%{efidir}/%{2} \
%attr(0755,root,root)/boot/efi/EFI/%{efidir}/fonts \ %attr(0755,root,root)/boot/efi/EFI/%{efidir}/fonts \
%ghost %config(noreplace) /boot/efi/EFI/%{efidir}/grub.cfg \ %ghost %config(noreplace) %attr(0700,root,root)/boot/efi/EFI/%{efidir}/grub.cfg \
/boot/grub2/grubenv \ /boot/grub2/grubenv \
%ghost %config(noreplace) %attr(0700,root,root)/boot/efi/EFI/%{efidir}/grubenv \ %ghost %config(noreplace) %attr(0700,root,root)/boot/efi/EFI/%{efidir}/grubenv \
\ \
@ -489,6 +489,6 @@ touch ${RPM_BUILD_ROOT}/boot/%{name}/grub.cfg \
\ \
%{expand:%%files %{1}-cdboot} \ %{expand:%%files %{1}-cdboot} \
%defattr(-,root,root,-) \ %defattr(-,root,root,-) \
%attr(0755,root,root)/boot/efi/EFI/%{efidir}/%{3} \ %attr(0700,root,root)/boot/efi/EFI/%{efidir}/%{3} \
%attr(0755,root,root)/boot/efi/EFI/%{efidir}/fonts \ %attr(0700,root,root)/boot/efi/EFI/%{efidir}/fonts \
%{nil} %{nil}

6
grub2.spec
View File

@ -314,7 +314,7 @@ fi
%exclude /boot/%{name}/themes/system/* %exclude /boot/%{name}/themes/system/*
%attr(0700,root,root) %dir /boot/grub2 %attr(0700,root,root) %dir /boot/grub2
%exclude /boot/grub2/* %exclude /boot/grub2/*
%dir %attr(0755,root,root) /boot/efi/EFI/%{efidir} %dir %attr(0700,root,root) /boot/efi/EFI/%{efidir}
%exclude /boot/efi/EFI/%{efidir}/* %exclude /boot/efi/EFI/%{efidir}/*
%license COPYING %license COPYING
%ghost %config(noreplace) /boot/grub2/grubenv %ghost %config(noreplace) /boot/grub2/grubenv
@ -454,6 +454,10 @@ fi
%endif %endif
%changelog %changelog
* Thu Jan 18 2018 Peter Jones <pjones@redhat.com> - 2.02-20
- Make everything under /boot/efi be mode 0700, since that's what FAT will
show anyway.
* Wed Jan 17 2018 Peter Jones <pjones@redhat.com> - 2.02-20 * Wed Jan 17 2018 Peter Jones <pjones@redhat.com> - 2.02-20
- Update to newer upstream for F28 - Update to newer upstream for F28
- Pull in patches for Apollo Lake hardware - Pull in patches for Apollo Lake hardware