Fix rpm verify issue found in testing.

Related: RHEL-11259

Signed-off-by: Peter Jones <pjones@redhat.com>
This commit is contained in:
Peter Jones 2024-03-28 18:48:57 -04:00 committed by Leo Sandoval
parent 1b739a1dee
commit 6abd8afe71
2 changed files with 10 additions and 6 deletions

View File

@ -179,10 +179,10 @@ install -m 0700 fb%{-a*}.efi \\\
# -A <EFIARCH>
%define define_files(a:A:) \
%{expand:%%files -n shim-%{-a*}} \
%{efi_esp_dir}/*%{-a*}*.efi \
%{efi_esp_dir}/BOOT%{-A*}.CSV \
%{efi_esp_boot}/*%{-a*}.efi \
%{efi_esp_boot}/*%{-A*}.EFI \
%%verify(not mtime) %{efi_esp_dir}/*%{-a*}*.efi \
%%verify(not mtime) %{efi_esp_dir}/BOOT%{-A*}.CSV \
%%verify(not mtime) %{efi_esp_boot}/*%{-a*}.efi \
%%verify(not mtime) %{efi_esp_boot}/*%{-A*}.EFI \
%{nil}
%ifarch x86_64

View File

@ -1,6 +1,6 @@
Name: shim
Version: 15.8
Release: 1.el8
Release: 2.el8
Summary: First-stage UEFI bootloader
License: BSD
URL: https://github.com/rhboot/shim/
@ -107,10 +107,14 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi
%endif
%if %{provide_legacy_shim}
%{efi_esp_dir}/shim.efi
%verify(not mtime) %{efi_esp_dir}/shim.efi
%endif
%changelog
* Thu Mar 28 2024 Peter Jones <pjones@redhat.com> - 15.8-2.el8
- Fix rpm verify issue found in testing.
Related: RHEL-11259
* Thu Mar 21 2024 Peter Jones <pjones@redhat.com> - 15.8-1.el8
- Update to shim-15.8 for CVE-2023-40547
Resolves: RHEL-11259