113 lines
4.0 KiB
RPMSpec
113 lines
4.0 KiB
RPMSpec
Name: mokutil
|
|
Version: 0.3.0
|
|
Release: 11%{?dist}
|
|
Epoch: 1
|
|
Summary: Tool to manage UEFI Secure Boot MoK Keys
|
|
License: GPLv3+
|
|
URL: https://github.com/lcp/mokutil
|
|
ExclusiveArch: %{ix86} x86_64 aarch64
|
|
BuildRequires: autoconf automake gnu-efi git openssl-devel openssl
|
|
BuildRequires: efivar-devel >= 31-1
|
|
Source0: https://github.com/lcp/mokutil/archive/%{version}.tar.gz
|
|
Conflicts: shim < 0.8-1%{?dist}
|
|
Obsoletes: mokutil <= 1:0.3.0-1
|
|
|
|
Patch0001: 0001-Fix-the-potential-buffer-overflow.patch
|
|
Patch0002: 0002-Fix-the-32bit-signedness-comparison.patch
|
|
Patch0003: 0003-Build-with-fshort-wchar-so-toggle-passwords-work-rig.patch
|
|
Patch0004: 0004-Don-t-allow-sha1-on-the-mokutil-command-line.patch
|
|
Patch0005: 0005-Make-all-efi_guid_t-const.patch
|
|
Patch0006: 0006-mokutil-be-explicit-about-file-modes-in-all-cases.patch
|
|
Patch0007: 0007-Add-bash-completion-file.patch
|
|
Patch0008: 0008-Fix-typo-in-error-message-when-the-system-lacks-Secu.patch
|
|
Patch0009: 0009-list_keys_in_var-check-errno-correctly-not-ret-twice.patch
|
|
Patch0010: 0010-generate_hash-generate_pw_hash-don-t-use-strlen-for-.patch
|
|
Patch0011: 0011-Fix-a-integer-comparison-sign-issue.patch
|
|
Patch0012: 0012-initial-mok-variables-code.patch
|
|
|
|
%description
|
|
mokutil provides a tool to manage keys for Secure Boot through the MoK
|
|
("Machine's Own Keys") mechanism.
|
|
|
|
%prep
|
|
%setup -q -n %{name}-%{version}
|
|
git init
|
|
git config user.email "%{name}-owner@fedoraproject.org"
|
|
git config user.name "Fedora Ninjas"
|
|
git add .
|
|
git commit -a -q -m "%{version} baseline."
|
|
git am %{patches} </dev/null
|
|
git config --unset user.email
|
|
git config --unset user.name
|
|
|
|
%build
|
|
./autogen.sh
|
|
%configure
|
|
make %{?_smp_mflags}
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
make PREFIX=%{_prefix} LIBDIR=%{_libdir} DESTDIR=%{buildroot} install
|
|
|
|
%files
|
|
%{!?_licensedir:%global license %%doc}
|
|
%license COPYING
|
|
%doc README
|
|
%{_bindir}/mokutil
|
|
%{_mandir}/man1/*
|
|
%{_datadir}/bash-completion/completions/mokutil
|
|
|
|
%changelog
|
|
* Tue Jan 05 2021 Javier Martinez Canillas <javierm@redhat.com> - 0.3.0-11
|
|
- Bump NVR for brew to build the package
|
|
Related: rhbz##1907418
|
|
|
|
* Wed Dec 30 2020 Javier Martinez Canillas <javierm@redhat.com> - 0.3.0-10
|
|
- Add mokutil code to consume data from /sys/firmware/efi/mok-variables/
|
|
as well as attempting to consume numbered mok variables from efivarfs
|
|
when mok-variables aren't present (pjones)
|
|
Resolves: rhbz#1907418
|
|
|
|
* Tue Jul 24 2018 Peter Jones <pjones@redhat.com> - 0.3.0-9
|
|
- Minor obsoletes fix
|
|
- Import some fixes from upstream
|
|
|
|
* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 1:0.3.0-8
|
|
- Rebuilt for switch to libxcrypt
|
|
|
|
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.3.0-7
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.3.0-6
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
* Sat Jul 08 2017 Peter Jones <pjones@redhat.com> - 0.3.0-5
|
|
- Rebuild for efivar-31-1.fc26
|
|
Related: rhbz#1468841
|
|
|
|
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.3.0-4
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
* Wed Aug 17 2016 Peter Jones <pjones@redhat.com> - 0.3.0-3
|
|
- Rebuild for newer efivar again.
|
|
|
|
* Wed Aug 10 2016 Peter Jones <pjones@redhat.com> - 0.3.0-2
|
|
- Update for newer efivar.
|
|
|
|
* Tue Jun 14 2016 Peter Jones <pjones@redhat.com> - 0.3.0-1
|
|
- Update to 0.3.0 release.
|
|
Resolves: rhbz#1334628
|
|
|
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.2.0-4
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:0.2.0-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 1:0.2.0-2
|
|
- Rebuilt for Fedora 23 Change
|
|
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
|
|
|
|
* Mon Oct 06 2014 Peter Jones <pjones@redhat.com> - 0.2.0-1
|
|
- First independent package.
|