AlmaLinux changes

This commit is contained in:
Andrew Lukoshko 2021-09-15 11:46:22 +00:00
parent a4d57b33a0
commit 7d184fed57
5 changed files with 8 additions and 5 deletions

BIN
SOURCES/clsecureboot001.cer Normal file

Binary file not shown.

Binary file not shown.

View File

@ -0,0 +1 @@
shim.cloudlinux,1,CloudLinux,shim,15.4-4,security@cloudlinux.com
1 shim.cloudlinux 1 CloudLinux shim 15.4-4 security@cloudlinux.com

View File

@ -1 +0,0 @@
shim.redhat,1,Red Hat,shim,15.4-4,secalert@redhat.com
1 shim.redhat 1 Red Hat shim 15.4-4 secalert@redhat.com

View File

@ -1,7 +1,7 @@
%global pesign_vre 0.106-1
%global openssl_vre 1.0.2j
%global efidir %(eval echo $(grep ^ID= /etc/os-release | sed -e 's/^ID=//' -e 's/rhel/redhat/'))
%global efidir almalinux
%global shimrootdir %{_datadir}/shim/
%global shimversiondir %{shimrootdir}/%{version}-%{release}
%global efiarch x64
@ -20,17 +20,17 @@
Name: shim-unsigned-%{efiarch}
Version: 15.4
Release: 4%{?dist}
Release: 4%{?dist}.alma
Summary: First-stage UEFI bootloader
ExclusiveArch: x86_64
License: BSD
URL: https://github.com/rhboot/shim
Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
Source1: redhatsecurebootca5.cer
Source1: clsecureboot001.cer
%if 0%{?dbxfile}
Source2: %{dbxfile}
%endif
Source3: sbat.redhat.csv
Source3: sbat.cloudlinux.csv
Source100: shim-find-debuginfo.sh
@ -183,6 +183,9 @@ cd ..
%files debugsource -f build-%{efiarch}/debugsource.list
%changelog
* Fri Apr 02 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 15.4-4.alma
- Use CloudLinux vendor cert and SBAT entry
* Thu Apr 01 2021 Peter Jones <pjones@redhat.com> - 15.4-4
- Fix the sbat data to actually match /this/ product.
Resolves: CVE-2020-14372