rpms/shim-unsigned-x64
7
0
Fork 0
Code Issues Pull Requests Releases Activity

AlmaLinux changes

Browse Source
This commit is contained in:
Andrew Lukoshko 2021-09-15 11:46:22 +00:00
parent a4d57b33a0
commit 7d184fed57
5 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
SOURCES/clsecureboot001.cer Normal file
View File

Binary file not shown.

BIN
SOURCES/redhatsecurebootca5.cer
View File

Binary file not shown.

1
SOURCES/sbat.cloudlinux.csv Normal file
View File

@ -0,0 +1 @@
shim.cloudlinux,1,CloudLinux,shim,15.4-4,security@cloudlinux.com
1 shim.cloudlinux 1 CloudLinux shim 15.4-4 security@cloudlinux.com

1
SOURCES/sbat.redhat.csv
View File

@ -1 +0,0 @@
shim.redhat,1,Red Hat,shim,15.4-4,secalert@redhat.com
1 shim.redhat 1 Red Hat shim 15.4-4 secalert@redhat.com

11
SPECS/shim-unsigned-x64.spec
View File

@ -1,7 +1,7 @@
%global pesign_vre 0.106-1 %global pesign_vre 0.106-1
%global openssl_vre 1.0.2j %global openssl_vre 1.0.2j
%global efidir %(eval echo $(grep ^ID= /etc/os-release | sed -e 's/^ID=//' -e 's/rhel/redhat/')) %global efidir almalinux
%global shimrootdir %{_datadir}/shim/ %global shimrootdir %{_datadir}/shim/
%global shimversiondir %{shimrootdir}/%{version}-%{release} %global shimversiondir %{shimrootdir}/%{version}-%{release}
%global efiarch x64 %global efiarch x64
@ -20,17 +20,17 @@
Name: shim-unsigned-%{efiarch} Name: shim-unsigned-%{efiarch}
Version: 15.4 Version: 15.4
Release: 4%{?dist} Release: 4%{?dist}.alma
Summary: First-stage UEFI bootloader Summary: First-stage UEFI bootloader
ExclusiveArch: x86_64 ExclusiveArch: x86_64
License: BSD License: BSD
URL: https://github.com/rhboot/shim URL: https://github.com/rhboot/shim
Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2 Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
Source1: redhatsecurebootca5.cer Source1: clsecureboot001.cer
%if 0%{?dbxfile} %if 0%{?dbxfile}
Source2: %{dbxfile} Source2: %{dbxfile}
%endif %endif
Source3: sbat.redhat.csv Source3: sbat.cloudlinux.csv
Source100: shim-find-debuginfo.sh Source100: shim-find-debuginfo.sh
@ -183,6 +183,9 @@ cd ..
%files debugsource -f build-%{efiarch}/debugsource.list %files debugsource -f build-%{efiarch}/debugsource.list
%changelog %changelog
* Fri Apr 02 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 15.4-4.alma
- Use CloudLinux vendor cert and SBAT entry
* Thu Apr 01 2021 Peter Jones <pjones@redhat.com> - 15.4-4 * Thu Apr 01 2021 Peter Jones <pjones@redhat.com> - 15.4-4
- Fix the sbat data to actually match /this/ product. - Fix the sbat data to actually match /this/ product.
Resolves: CVE-2020-14372 Resolves: CVE-2020-14372