diff --git a/.shim-unsigned-aarch64.metadata b/.shim-unsigned-aarch64.metadata
new file mode 100644
index 0000000..e3c0ba6
--- /dev/null
+++ b/.shim-unsigned-aarch64.metadata
@@ -0,0 +1 @@
+2dc6308584187bf3ee88bf9b119938c72c5a5088 shim-15.tar.bz2
diff --git a/0011-RHEL-9-disable-Wpointer-sign-for-now.patch b/0011-RHEL-9-disable-Wpointer-sign-for-now.patch
new file mode 100644
index 0000000..e16a0b0
--- /dev/null
+++ b/0011-RHEL-9-disable-Wpointer-sign-for-now.patch
@@ -0,0 +1,25 @@
+From 7e7fa748c8651ca3d9fdd55f0ad891c816949ff5 Mon Sep 17 00:00:00 2001
+From: Peter Jones <pjones@redhat.com>
+Date: Fri, 6 Aug 2021 16:43:37 -0400
+Subject: [PATCH] RHEL-9: disable -Wpointer-sign for now
+
+Signed-off-by: Peter Jones <pjones@redhat.com>
+---
+ Make.defaults | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/Make.defaults b/Make.defaults
+index e11ab5a7f2c..9b28720d186 100644
+--- a/Make.defaults
++++ b/Make.defaults
+@@ -42,6 +42,7 @@ EFI_LDS		= $(TOPDIR)/elf_$(ARCH)_efi.lds
+ CFLAGS		= -ggdb -O0 -fno-stack-protector -fno-strict-aliasing -fpic \
+ 		  -fshort-wchar -Wall -Wsign-compare -Werror -fno-builtin \
+ 		  -Werror=sign-compare -ffreestanding -std=gnu89 \
++		  -Wno-pointer-sign -Wno-address-of-packed-member \
+ 		  -I$(shell $(CC) -print-file-name=include) \
+ 		  "-DDEFAULT_LOADER=L\"$(DEFAULT_LOADER)\"" \
+ 		  "-DDEFAULT_LOADER_CHAR=\"$(DEFAULT_LOADER)\"" \
+-- 
+2.31.1
+
diff --git a/shim-unsigned-aarch64.spec b/shim-unsigned-aarch64.spec
index a5238e8..acf7f40 100644
--- a/shim-unsigned-aarch64.spec
+++ b/shim-unsigned-aarch64.spec
@@ -39,6 +39,7 @@ Patch0007:	0007-shim-Properly-generate-absolute-paths-from-relative-.patch
 Patch0008:	0008-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch
 Patch0009:	0009-Fix-a-use-of-strlen-instead-of-Strlen.patch
 Patch0010:	0010-translate_slashes-don-t-write-to-string-literals.patch
+Patch0011:	0011-RHEL-9-disable-Wpointer-sign-for-now.patch
 
 BuildRequires:	gcc make
 BuildRequires:	elfutils-libelf-devel