From f2b72c0756b8fbe482aeb74477ed351585bb7739 Mon Sep 17 00:00:00 2001 From: Marta Lewandowska Date: Mon, 20 Jul 2026 14:50:15 +0200 Subject: [PATCH] Add pesigcheck on UEFI platforms And turn off patches test in rpminspect. Signed-off-by: Marta Lewandowska --- grub2.spec | 20 +++++++++++++++++++- rpminspect.yaml | 1 + 2 files changed, 20 insertions(+), 1 deletion(-) diff --git a/grub2.spec b/grub2.spec index 8a62d56..bffa8ab 100644 --- a/grub2.spec +++ b/grub2.spec @@ -16,7 +16,7 @@ Name: grub2 Epoch: 1 Version: 2.06 -Release: 131%{?dist} +Release: 134%{?dist} Summary: Bootloader with support for Linux, Multiboot and more License: GPLv3+ URL: http://www.gnu.org/software/grub/ @@ -304,6 +304,12 @@ ln -s ../%{name}-systemd-integration.service \ %undefine buildsubdir +%check +%if 0%{with_efi_arch} +pesigcheck -i $RPM_BUILD_ROOT%{efi_esp_dir}/%{grubefiname} -n0 -c %{sb_cer} +pesigcheck -i $RPM_BUILD_ROOT%{efi_esp_dir}/%{grubeficdname} -n0 -c %{sb_cer} +%endif + %pre tools if [ -f /boot/%{name}/user.cfg ]; then if grep -q '^GRUB_PASSWORD=' /boot/%{name}/user.cfg ; then @@ -546,6 +552,18 @@ fi %endif %changelog +* Wed Jul 29 2026 Marta Lewandowska 2.06-134 +- Add pesigcheck to check for correct SB signature on UEFI +- Resolves: RHEL-188360 + +* Fri Jul 24 2026 Leo Sandoval - 2.06-133 +- Run grub2-install automatically on grub2-pc posttrans +- Resolves: #RHEL-216339 + +* Mon Jul 21 2026 Josue Hernandez - 2.06-132 +- Remove creation of /boot/loader/entries +- Resolves: #RHEL-212729 + * Mon Jul 06 2026 Rolv Apneseth - 2.06-131 - mdraid: fix metadata 1.0 detection in userspace utilities on IEEE1275 - grub-install: use search.fs_uuid for RAID1 on IEEE1275 diff --git a/rpminspect.yaml b/rpminspect.yaml index 2197640..f5e6d92 100644 --- a/rpminspect.yaml +++ b/rpminspect.yaml @@ -2,6 +2,7 @@ inspections: abidiff: off + patches: off --- # Disable annobin stack check since grub's initialization code doesn't support it