|
|
|
@ -8,7 +8,7 @@
|
|
|
|
%global __debug_install_post %{SOURCE100} x64 ia32
|
|
|
|
%global __debug_install_post %{SOURCE100} x64 ia32
|
|
|
|
%undefine _debuginfo_subpackages
|
|
|
|
%undefine _debuginfo_subpackages
|
|
|
|
|
|
|
|
|
|
|
|
%global efidir %(eval echo $(grep ^ID= /etc/os-release | sed -e 's/^ID=//' -e 's/rhel/redhat/'))
|
|
|
|
%global efidir almalinux
|
|
|
|
%global shimrootdir %{_datadir}/shim/
|
|
|
|
%global shimrootdir %{_datadir}/shim/
|
|
|
|
%global shimversiondir %{shimrootdir}/%{version}-%{release}
|
|
|
|
%global shimversiondir %{shimrootdir}/%{version}-%{release}
|
|
|
|
%global efiarch x64
|
|
|
|
%global efiarch x64
|
|
|
|
@ -18,17 +18,17 @@
|
|
|
|
|
|
|
|
|
|
|
|
Name: shim-unsigned-%{efiarch}
|
|
|
|
Name: shim-unsigned-%{efiarch}
|
|
|
|
Version: 15.6
|
|
|
|
Version: 15.6
|
|
|
|
Release: 1.el8
|
|
|
|
Release: 1.el8.alma.1
|
|
|
|
Summary: First-stage UEFI bootloader
|
|
|
|
Summary: First-stage UEFI bootloader
|
|
|
|
ExclusiveArch: x86_64
|
|
|
|
ExclusiveArch: x86_64
|
|
|
|
License: BSD
|
|
|
|
License: BSD
|
|
|
|
URL: https://github.com/rhboot/shim
|
|
|
|
URL: https://github.com/rhboot/shim
|
|
|
|
Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
|
|
|
|
Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
|
|
|
|
Source1: redhatsecurebootca5.cer
|
|
|
|
Source1: vendor_db.esl
|
|
|
|
# currently here's what's in our dbx:
|
|
|
|
# currently here's what's in our dbx:
|
|
|
|
# nothing.
|
|
|
|
# nothing.
|
|
|
|
Source2: dbx.esl
|
|
|
|
Source2: dbx.esl
|
|
|
|
Source3: sbat.redhat.csv
|
|
|
|
Source3: sbat.almalinux.csv
|
|
|
|
Source4: shim.patches
|
|
|
|
Source4: shim.patches
|
|
|
|
|
|
|
|
|
|
|
|
Source100: shim-find-debuginfo.sh
|
|
|
|
Source100: shim-find-debuginfo.sh
|
|
|
|
@ -109,7 +109,7 @@ MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
|
|
|
|
MAKEFLAGS+="ENABLE_SHIM_HASH=true "
|
|
|
|
MAKEFLAGS+="ENABLE_SHIM_HASH=true "
|
|
|
|
MAKEFLAGS+="%{_smp_mflags}"
|
|
|
|
MAKEFLAGS+="%{_smp_mflags}"
|
|
|
|
if [ -s "%{SOURCE1}" ]; then
|
|
|
|
if [ -s "%{SOURCE1}" ]; then
|
|
|
|
MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1}"
|
|
|
|
MAKEFLAGS="$MAKEFLAGS VENDOR_DB_FILE=%{SOURCE1}"
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
if [ -s "%{SOURCE2}" ]; then
|
|
|
|
if [ -s "%{SOURCE2}" ]; then
|
|
|
|
MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2}"
|
|
|
|
MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2}"
|
|
|
|
@ -133,7 +133,7 @@ MAKEFLAGS="TOPDIR=.. -f ../Makefile COMMITID=${COMMITID} "
|
|
|
|
MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
|
|
|
|
MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
|
|
|
|
MAKEFLAGS+="ENABLE_HTTPBOOT=true ENABLE_SHIM_HASH=true "
|
|
|
|
MAKEFLAGS+="ENABLE_HTTPBOOT=true ENABLE_SHIM_HASH=true "
|
|
|
|
if [ -s "%{SOURCE1}" ]; then
|
|
|
|
if [ -s "%{SOURCE1}" ]; then
|
|
|
|
MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1}"
|
|
|
|
MAKEFLAGS="$MAKEFLAGS VENDOR_DB_FILE=%{SOURCE1}"
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
if [ -s "%{SOURCE2}" ]; then
|
|
|
|
if [ -s "%{SOURCE2}" ]; then
|
|
|
|
MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2}"
|
|
|
|
MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2}"
|
|
|
|
@ -178,6 +178,9 @@ cd ..
|
|
|
|
%files debugsource -f build-%{efiarch}/debugsource.list
|
|
|
|
%files debugsource -f build-%{efiarch}/debugsource.list
|
|
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
%changelog
|
|
|
|
|
|
|
|
* Mon Jun 20 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 15.6-1.el8.alma.1
|
|
|
|
|
|
|
|
- Use AlmaLinux cert and SBAT entry
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jun 01 2022 Peter Jones <pjones@redhat.com> - 15.6-1.el8
|
|
|
|
* Wed Jun 01 2022 Peter Jones <pjones@redhat.com> - 15.6-1.el8
|
|
|
|
- Update to shim-15.6
|
|
|
|
- Update to shim-15.6
|
|
|
|
Resolves: CVE-2022-28737
|
|
|
|
Resolves: CVE-2022-28737
|
|
|
|
|
