8f1a5b9955
Rest of kernel allocator fixups
...
Resolves : #2108456
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-08-02 14:42:02 +00:00
217d6ad6ef
Kernel allocator fixups
...
Resolves : #2108456
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-08-02 13:48:57 +00:00
d938855e21
Rebuild against new ppc64le key
...
Resolves : #2074761
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-07-18 19:44:56 +00:00
836032bc4e
Rebuild against new ppc64le key
...
Resolves : #2074761
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-07-18 19:03:10 +00:00
49f16a61fd
Bump release
...
Resolves : #2051314
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-06-28 19:08:57 -04:00
d1284519d3
Bless the TPM module on ppc64le
...
Resolves : #2051314
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-06-28 22:48:20 +00:00
42b3050a74
CVE fixes for 2022-05-24
...
CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
Resolves : #2070688
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-06-03 14:09:47 -04:00
1b83bb93b8
ppc64le: make ofdisk_retries optional
...
Resolves : #2070725
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-05-17 16:54:01 +00:00
4ff57c1cdd
ppc64le: CAS improvements, prefix detection, and vTPM support
...
Resolves : #2068281
Resolves : #2051314
Resolves : #2076798
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-05-04 18:29:29 +00:00
f0e4b8c683
Fix rpm verification report on grub.cfg permissions
...
Resolves : #2076322
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-05-04 17:31:36 +00:00
e3753ed4c2
First 9.1 build; no changes from 9.0
...
- Fix initialization on efidisk patch
- Re-run signing with updated redhat-release
Resolves : #2062874
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-05-04 12:06:10 -04:00
01f68549dc
Enable connectefi module
...
Resolves : #2049219
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-02-28 19:16:25 +00:00
82f85447d7
Add efidisk/connectefi patches
...
Resolves : #2049219
Resolves : #2049220
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-02-24 22:24:21 +00:00
d08fc02f2d
Re-arm GRUB_ENABLE_BLSCFG=false
...
Resolves : #2018331
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-02-18 21:21:20 +00:00
bfdc50ae19
Stop building unsupported 32-bit UEFI stuff
...
Resolves : #2038401
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-02-18 20:38:05 +00:00
ea946fe76d
Require Secure Boot certs based on architecture
...
Resolves : #2049214
Signed-off-by: Brian Stinson <bstinson@redhat.com>
2022-02-16 15:55:59 -06:00
726ced531a
Conditionalize Secure Boot settings per architecture
...
Related: rhbz#2049214
Signed-off-by: Brian Stinson <bstinson@redhat.com>
2022-02-16 15:13:14 -06:00
2ab799de70
Attempt to fix ppc64le signing bugs in previous change
...
Resolves : #2049214
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-02-16 19:05:03 +00:00
c4d20133ef
Bump spec for previous two signing commits
...
Resolves : #2049214
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-02-16 12:41:39 -05:00
3f01b520d0
Point secureboot certs at the paths defined by the *-sb-certs packages
...
Resolves: rhbz#2049214
Signed-off-by: Brian Stinson <bstinson@redhat.com>
[rharwood: commit message, conditional fix]
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-02-16 12:39:39 -05:00
ac3d500683
Switch grub2 back to single-signing for Secure Boot
...
Related: rhbz#2049214
Signed-off-by: Brian Stinson <bstinson@redhat.com>
2022-02-15 13:00:50 -06:00
6bb9a7593b
CVE-2021-3981 (Incorrect read permission in grub.cfg)
...
Resolves: rhbz#2030724
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-02-02 11:28:15 -05:00
161ae8daaf
Stop having this problem and just copy over the beta tree
...
Resolves: rhbz#2006784
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-01-04 20:33:19 +00:00
0b61fb6968
Fix NVR in previous change; no code changes
...
Resolves: rhbz#2006784
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-01-04 14:50:01 -05:00
1742f60e82
Rebuild for correct signatures
...
Resolves: rhbz#2006784
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2022-01-04 14:14:53 -05:00
575027c3e4
Rebuild for signing; no code changes
...
Resolves: rhbz#2006784
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2021-12-21 15:50:56 +00:00
29cb68279c
Rebuild for gating; no code changes
...
Resolves: rhbz#2006784
2021-11-19 18:59:40 +00:00
56200915a6
Version jump because our process is bad
...
Resolves: rhbz#2006784
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2021-10-26 16:36:28 -04:00
4e8839634b
Sync with beta changes
...
Resolves: rhbz#2006784
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
2021-10-26 15:49:17 -04:00
4c7c1f4aaf
Rebuild for gating + rpminspect
...
Resolves: rhbz#2006784
2021-09-28 10:26:11 -04:00
69afd9d3a2
Rebuild because our CI infrastructure doesn't work right
...
Resolves: rhbz#2006784
2021-09-23 11:24:24 -04:00
439f9e9576
Update to 2.06 final release and ton of fixes
...
Resolves: rhbz#1976771
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
2021-08-31 13:37:28 +02:00
ea6c160b6a
Fix kernel cmdline params getting overwritten on ppc64le
...
Resolves: rhbz#1973564
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
2021-06-23 11:03:25 +02:00
07b9866096
Add XFS needsrepair support
...
Resolves: rhbz#1940165
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
2021-05-03 17:42:33 +02:00
d2aa233cb7
Find and claim more memory for ieee1275
...
Resolves: rhbz#1873860
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
2021-04-26 11:17:41 +02:00
95fb16271d
Add XFS bigtime support
...
Resolves: rhbz#1940165
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
2021-04-14 16:15:54 +02:00
3131f9646a
Use RHEL distro SBAT data also for CentOS Stream
...
We were adding a CentOS Stream specific SBAT component entry, but doesn't
really make sense since the RHEL 9 content is exactly the same. Otherwise,
in case of a revocation there will be needed two entries in the SbatLevel
variable for no good reasons.
Related: rhbz#1947696
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
2021-04-13 17:22:54 +02:00
09511e8638
Update distro SBAT entry to contain information about CentOS Stream
...
Related: rhbz#1947696
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
2021-04-12 01:36:21 +02:00
1d49572ef1
Update to latest content from upstream sources
...
The content of this branch was not automatically imported from upstream
sources. Pull the latest from upstream to have the missing changes here.
Source: https://src.fedoraproject.org/rpms/grub2.git#f2763e56df79eccae17d2e8fa13d2f51a0fe7073
Resolves: rhbz#1947696
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
2021-04-12 01:36:21 +02:00
7f3bf26ea4
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/grub2.git#b1411716293a399086585ec89428879fd1130e7b
2021-02-22 12:38:05 +01:00
1d842d2b55
Merged update from upstream sources
...
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.
Source: https://src.fedoraproject.org/rpms/grub2.git#f9736ec08517869c0e2d4e3491da8abe09ab1d60
2021-01-12 16:38:06 +00:00
9c56a74842
Rebuild to pick up correct signing location - try 2
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2020-11-02 10:06:21 -05:00
b84ccd0a6d
Rebuild to pick up correct signing location
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2020-11-02 09:48:04 -05:00
100e37f2e6
RHEL 9.0.0 Alpha bootstrap
...
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/grub2#f7e054f3d693af43a903faf33b70673f7aca4508
2020-10-15 09:48:35 +02:00
Robbie Harwood
Brian Stinson
Javier Martinez Canillas
DistroBaker
Stephen Gallagher
Petr Šabata