Compare commits
No commits in common. "c10s" and "c8" have entirely different histories.
3
.gitignore
vendored
3
.gitignore
vendored
@ -1,2 +1 @@
|
|||||||
/shim-*.tar.bz2
|
SOURCES/shim-15.8.tar.bz2
|
||||||
*.rpm
|
|
||||||
|
1
.shim-unsigned-aarch64.metadata
Normal file
1
.shim-unsigned-aarch64.metadata
Normal file
@ -0,0 +1 @@
|
|||||||
|
cdec924ca437a4509dcb178396996ddf92c11183 SOURCES/shim-15.8.tar.bz2
|
@ -16,18 +16,18 @@
|
|||||||
|
|
||||||
Name: shim-unsigned-aarch64
|
Name: shim-unsigned-aarch64
|
||||||
Version: 15.8
|
Version: 15.8
|
||||||
Release: 4%{?dist}
|
Release: 2.el8
|
||||||
Summary: First-stage UEFI bootloader
|
Summary: First-stage UEFI bootloader
|
||||||
ExclusiveArch: aarch64
|
ExclusiveArch: aarch64
|
||||||
License: BSD-2-Clause AND OpenSSL
|
License: BSD
|
||||||
URL: https://github.com/rhboot/shim
|
URL: https://github.com/rhboot/shim
|
||||||
Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
|
Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
|
||||||
Source1: securebootca.cer
|
Source1: securebootca.cer
|
||||||
# currently here's what's in our dbx:
|
# currently here's what's in our dbx:
|
||||||
# nothing.
|
# nothing.
|
||||||
Source2: dbx.esl
|
Source2: dbx.esl
|
||||||
Source3: sbat.redhat.csv
|
Source3: sbat.redhat.csv
|
||||||
Source4: shim.patches
|
Source4: shim.patches
|
||||||
|
|
||||||
Source100: shim-find-debuginfo.sh
|
Source100: shim-find-debuginfo.sh
|
||||||
|
|
||||||
@ -37,7 +37,7 @@ BuildRequires: gcc make
|
|||||||
BuildRequires: elfutils-libelf-devel
|
BuildRequires: elfutils-libelf-devel
|
||||||
BuildRequires: git openssl-devel openssl
|
BuildRequires: git openssl-devel openssl
|
||||||
BuildRequires: pesign >= %{pesign_vre}
|
BuildRequires: pesign >= %{pesign_vre}
|
||||||
BuildRequires: dos2unix findutils
|
BuildRequires: dos2unix findutils
|
||||||
|
|
||||||
# Shim uses OpenSSL, but cannot use the system copy as the UEFI ABI is not
|
# Shim uses OpenSSL, but cannot use the system copy as the UEFI ABI is not
|
||||||
# compatible with SysV (there's no red zone under UEFI) and there isn't a
|
# compatible with SysV (there's no red zone under UEFI) and there isn't a
|
||||||
@ -89,7 +89,7 @@ MAKEFLAGS+="ENABLE_SHIM_HASH=true "
|
|||||||
MAKEFLAGS+="SBAT_AUTOMATIC_DATE=2023012900 "
|
MAKEFLAGS+="SBAT_AUTOMATIC_DATE=2023012900 "
|
||||||
MAKEFLAGS+="%{_smp_mflags}"
|
MAKEFLAGS+="%{_smp_mflags}"
|
||||||
if [ -f "%{SOURCE1}" ]; then
|
if [ -f "%{SOURCE1}" ]; then
|
||||||
MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1} "
|
MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1} "
|
||||||
fi
|
fi
|
||||||
if [ -f "%{SOURCE2}" ]; then
|
if [ -f "%{SOURCE2}" ]; then
|
||||||
MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2} "
|
MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2} "
|
||||||
@ -133,16 +133,13 @@ cd ..
|
|||||||
%files debugsource -f build-%{efiarch}/debugsource.list
|
%files debugsource -f build-%{efiarch}/debugsource.list
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Wed Jun 4 2025 Nicolas Frayer <nfrayer@redhat.com> - 15.8-4.el10
|
* Wed Feb 07 2024 Peter Jones <pjones@redhat.com> - 15.8-2.el8
|
||||||
- spec: license migration to SPDX
|
- Rebuild to fix the commit ident and MAKEFLAGS
|
||||||
- Resolves: #RHEL-95022
|
Resolves: RHEL-11259
|
||||||
|
|
||||||
* Thu Mar 13 2025 Nicolas Frayer <nfrayer@redhat.com> - 15.8-3.el10
|
* Tue Dec 05 2023 Peter Jones <pjones@redhat.com> - 15.8-1.el8
|
||||||
- Update gating.yaml for rhel-10
|
- Update to shim-15.8 for CVE-2023-40547
|
||||||
- Resolves: #RHEL-83446
|
Resolves: RHEL-11259
|
||||||
|
|
||||||
* Thu Mar 6 2025 Nicolas Frayer <nfrayer@redhat.com> - 15.8-2.el10
|
|
||||||
- Update to shim-15.8
|
|
||||||
|
|
||||||
* Tue May 26 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-6
|
* Tue May 26 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-6
|
||||||
- Fix a shim crash when attempting to netboot
|
- Fix a shim crash when attempting to netboot
|
8
build
8
build
@ -1,8 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
set -e
|
|
||||||
if [ $# -ne 1 ]; then
|
|
||||||
echo "usage: ./build <release>" 1>&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
arm-koji build $1 `fedpkg giturl`
|
|
||||||
|
|
@ -1,6 +0,0 @@
|
|||||||
--- !Policy
|
|
||||||
product_versions:
|
|
||||||
- rhel-10
|
|
||||||
decision_context: osci_compose_gate
|
|
||||||
rules:
|
|
||||||
- !PassingTestCaseRule {test_case_name: manual.sst_desktop.shim.functional}
|
|
BIN
rhtest.cer
BIN
rhtest.cer
Binary file not shown.
BIN
secureboot.cer
BIN
secureboot.cer
Binary file not shown.
Loading…
Reference in New Issue
Block a user