From 6abd8afe71b9960a5e91e6b155ee90b10c497816 Mon Sep 17 00:00:00 2001 From: Peter Jones Date: Thu, 28 Mar 2024 18:48:57 -0400 Subject: [PATCH] Fix rpm verify issue found in testing. Related: RHEL-11259 Signed-off-by: Peter Jones --- shim.rpmmacros | 8 ++++---- shim.spec | 8 ++++++-- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/shim.rpmmacros b/shim.rpmmacros index 0d1cdba..d606297 100644 --- a/shim.rpmmacros +++ b/shim.rpmmacros @@ -179,10 +179,10 @@ install -m 0700 fb%{-a*}.efi \\\ # -A %define define_files(a:A:) \ %{expand:%%files -n shim-%{-a*}} \ -%{efi_esp_dir}/*%{-a*}*.efi \ -%{efi_esp_dir}/BOOT%{-A*}.CSV \ -%{efi_esp_boot}/*%{-a*}.efi \ -%{efi_esp_boot}/*%{-A*}.EFI \ +%%verify(not mtime) %{efi_esp_dir}/*%{-a*}*.efi \ +%%verify(not mtime) %{efi_esp_dir}/BOOT%{-A*}.CSV \ +%%verify(not mtime) %{efi_esp_boot}/*%{-a*}.efi \ +%%verify(not mtime) %{efi_esp_boot}/*%{-A*}.EFI \ %{nil} %ifarch x86_64 diff --git a/shim.spec b/shim.spec index 692292e..7dcdfe8 100644 --- a/shim.spec +++ b/shim.spec @@ -1,6 +1,6 @@ Name: shim Version: 15.8 -Release: 1.el8 +Release: 2.el8 Summary: First-stage UEFI bootloader License: BSD URL: https://github.com/rhboot/shim/ @@ -107,10 +107,14 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi %endif %if %{provide_legacy_shim} -%{efi_esp_dir}/shim.efi +%verify(not mtime) %{efi_esp_dir}/shim.efi %endif %changelog +* Thu Mar 28 2024 Peter Jones - 15.8-2.el8 +- Fix rpm verify issue found in testing. + Related: RHEL-11259 + * Thu Mar 21 2024 Peter Jones - 15.8-1.el8 - Update to shim-15.8 for CVE-2023-40547 Resolves: RHEL-11259