Make the bkernel hack even more load bearing...

This commit is contained in:
Peter Jones 2020-07-16 10:54:54 -04:00
parent 2335e6390f
commit 00ec5834e3

View File

@ -12,7 +12,7 @@ diff --git a/src/pesign-rpmbuild-helper.in b/src/pesign-rpmbuild-helper.in
index d9236035928..2666c74a9ba 100644 index d9236035928..2666c74a9ba 100644
--- a/src/pesign-rpmbuild-helper.in --- a/src/pesign-rpmbuild-helper.in
+++ b/src/pesign-rpmbuild-helper.in +++ b/src/pesign-rpmbuild-helper.in
@@ -195,6 +195,22 @@ main() { @@ -195,6 +195,23 @@ main() {
"${input[@]}" "${output[@]}" "${input[@]}" "${output[@]}"
rm -rf "${sattrs}" "${sattrs}.sig" "${nssdir}" rm -rf "${sattrs}" "${sattrs}.sig" "${nssdir}"
elif [[ -n "${socket}" ]] ; then elif [[ -n "${socket}" ]] ; then
@ -21,6 +21,7 @@ index d9236035928..2666c74a9ba 100644
+ if [[ "${input[1]}" =~ (/|^)vmlinuz($|[_.-]) ]] \ + if [[ "${input[1]}" =~ (/|^)vmlinuz($|[_.-]) ]] \
+ || [[ "${input[1]}" =~ (/|^)bzImage($|[_.-]) ]] ; then + || [[ "${input[1]}" =~ (/|^)bzImage($|[_.-]) ]] ; then
+ if [[ "${rhelcertfile}" =~ redhatsecureboot501.* ]] \ + if [[ "${rhelcertfile}" =~ redhatsecureboot501.* ]] \
+ || [[ "${rhelcertfile}" =~ redhatsecureboot401.* ]] ; then
+ || [[ "${rhelcertfile}" =~ centossecureboot201.* ]] ; then + || [[ "${rhelcertfile}" =~ centossecureboot201.* ]] ; then
+ client_token[1]=kernel-signer + client_token[1]=kernel-signer
+ elif [[ "${rhelcertfile}" =~ redhatsecureboot502.* ]] \ + elif [[ "${rhelcertfile}" =~ redhatsecureboot502.* ]] \