rpms/grub2
5
0
Fork 0
Code Issues Pull Requests Releases Activity
106 Commits 17 Branches 112 Tags 7.7 MiB
69027610fe
Commit Graph

19 Commits

Author SHA1 Message Date
Leo Sandoval
73fed98a8a grub.cfg: Fix rpm grub.cfg permission and verification issues 
Fix the rpm verificaton issues (see NOTE below) introduced in 2.06-83 [1].
On the other hand, 2.06-85 [2] introduced a change on grub2-mkconfig where
it prevents overwritting `${EFI_HOME}/grub.cfg` with side effects on the
`%posttrans` scriptlet, where it tries to recreate it in case this
file does not exist but due to [2] the `${EFI}/grub.cfg` file is never
created. Fix the `%posttrans` code with the logic but applied to
${GRUB_HOME}/grub.cfg. On the same scriplet, make sure
${EFI_HOME}/grub.cfg is present before grepping into it. The changes also
fix the issue reported on RHEL-45870 where now /boot/grub2/grub.cfg
conf file has the right permission (-rw-------).

NOTE: With 2.06-83 release, the grub.cfg configuration files regressed on
file's mode (M) verification

    [root@localhost ~]# rpm -Va
    S.5....T.  c /etc/ssh/sshd_config
    .M.......  c /boot/efi/EFI/redhat/grub.cfg
    .M.......  c /boot/grub2/grub.cfg

The following change fixes the issues above as seen in log

    [root@localhost ~]# rpm -Va
    S.5....T.  c /etc/ssh/sshd_config

[1] https://pkgs.devel.redhat.com/cgit/rpms/grub2/commit/?h=rhel-9-main&id=694ab652e3443719e3876e3d183e59b2f9e055fd
[2] https://pkgs.devel.redhat.com/cgit/rpms/grub2/commit/?h=rhel-9-main&id=0185426fb4d693307cda0c7740e9dcf9907cc146

Resolves: #RHEL-45870
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2024-08-01 10:38:19 -06:00
Leo Sandoval
694ab652e3 grub-mkconfig.in: turn off executable owner bit 
Resolves: RHEL-45870
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2024-07-02 18:11:03 +02:00
Nicolas Frayer
5dc4855520 build with baseline ISA flags 
Resolves: #2215860
Signed-off-by: Florian Weimer <fweimer@redhat.com>
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2023-07-20 17:03:44 +02:00
Robbie Harwood
861fb30b3e Sync patches with Fedora 
Resolves: #2007427
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2023-02-16 09:51:24 -05:00
Robbie Harwood
77d588fe51 Bless the ofnet module down in ppc64le 
Resolves: #2143420
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-11-21 20:24:50 +00:00
Robbie Harwood
d449759abf Skip rpm mtime verification on likely-vfat filesystems 
Resolves: #2047979
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-08-15 21:04:30 +00:00
Robbie Harwood
d1284519d3 Bless the TPM module on ppc64le 
Resolves: #2051314
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-06-28 22:48:20 +00:00
Robbie Harwood
42b3050a74 CVE fixes for 2022-05-24 
CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
Resolves: #2070688

Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-06-03 14:09:47 -04:00
Robbie Harwood
f0e4b8c683 Fix rpm verification report on grub.cfg permissions 
Resolves: #2076322
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-05-04 17:31:36 +00:00
Robbie Harwood
01f68549dc Enable connectefi module 
Resolves: #2049219
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-02-28 19:16:25 +00:00
Robbie Harwood
bfdc50ae19 Stop building unsupported 32-bit UEFI stuff 
Resolves: #2038401
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-02-18 20:38:05 +00:00
Robbie Harwood
2ab799de70 Attempt to fix ppc64le signing bugs in previous change 
Resolves: #2049214
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-02-16 19:05:03 +00:00
Brian Stinson
ac3d500683 Switch grub2 back to single-signing for Secure Boot 
Related: rhbz#2049214

Signed-off-by: Brian Stinson <bstinson@redhat.com>
 2022-02-15 13:00:50 -06:00
Robbie Harwood
161ae8daaf Stop having this problem and just copy over the beta tree 
Resolves: rhbz#2006784
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
 2022-01-04 20:33:19 +00:00
Javier Martinez Canillas
439f9e9576
Update to 2.06 final release and ton of fixes 
Resolves: rhbz#1976771

Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
 2021-08-31 13:37:28 +02:00
Javier Martinez Canillas
1d49572ef1
Update to latest content from upstream sources 
The content of this branch was not automatically imported from upstream
sources. Pull the latest from upstream to have the missing changes here.

Source: https://src.fedoraproject.org/rpms/grub2.git#f2763e56df79eccae17d2e8fa13d2f51a0fe7073

Resolves: rhbz#1947696

Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
 2021-04-12 01:36:21 +02:00
DistroBaker
7f3bf26ea4 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/grub2.git#b1411716293a399086585ec89428879fd1130e7b
 2021-02-22 12:38:05 +01:00
DistroBaker
1d842d2b55 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/grub2.git#f9736ec08517869c0e2d4e3491da8abe09ab1d60
 2021-01-12 16:38:06 +00:00
Petr Šabata
100e37f2e6 RHEL 9.0.0 Alpha bootstrap 
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/grub2#f7e054f3d693af43a903faf33b70673f7aca4508
 2020-10-15 09:48:35 +02:00