forked from rpms/shim-unsigned-aarch64
Compare commits
No commits in common. "c9s" and "c8" have entirely different histories.
3
.gitignore
vendored
3
.gitignore
vendored
@ -1,2 +1 @@
|
||||
/shim-*.tar.bz2
|
||||
*.rpm
|
||||
SOURCES/shim-15.tar.bz2
|
||||
|
@ -1 +1 @@
|
||||
2dc6308584187bf3ee88bf9b119938c72c5a5088 shim-15.tar.bz2
|
||||
2dc6308584187bf3ee88bf9b119938c72c5a5088 SOURCES/shim-15.tar.bz2
|
||||
|
@ -1,25 +0,0 @@
|
||||
From 7e7fa748c8651ca3d9fdd55f0ad891c816949ff5 Mon Sep 17 00:00:00 2001
|
||||
From: Peter Jones <pjones@redhat.com>
|
||||
Date: Fri, 6 Aug 2021 16:43:37 -0400
|
||||
Subject: [PATCH] RHEL-9: disable -Wpointer-sign for now
|
||||
|
||||
Signed-off-by: Peter Jones <pjones@redhat.com>
|
||||
---
|
||||
Make.defaults | 1 +
|
||||
1 file changed, 1 insertion(+)
|
||||
|
||||
diff --git a/Make.defaults b/Make.defaults
|
||||
index e11ab5a7f2c..9b28720d186 100644
|
||||
--- a/Make.defaults
|
||||
+++ b/Make.defaults
|
||||
@@ -42,6 +42,7 @@ EFI_LDS = $(TOPDIR)/elf_$(ARCH)_efi.lds
|
||||
CFLAGS = -ggdb -O0 -fno-stack-protector -fno-strict-aliasing -fpic \
|
||||
-fshort-wchar -Wall -Wsign-compare -Werror -fno-builtin \
|
||||
-Werror=sign-compare -ffreestanding -std=gnu89 \
|
||||
+ -Wno-pointer-sign -Wno-address-of-packed-member \
|
||||
-I$(shell $(CC) -print-file-name=include) \
|
||||
"-DDEFAULT_LOADER=L\"$(DEFAULT_LOADER)\"" \
|
||||
"-DDEFAULT_LOADER_CHAR=\"$(DEFAULT_LOADER)\"" \
|
||||
--
|
||||
2.31.1
|
||||
|
@ -16,7 +16,7 @@
|
||||
|
||||
Name: shim-unsigned-aarch64
|
||||
Version: 15
|
||||
Release: 6%{?dist}
|
||||
Release: 7%{?dist}
|
||||
Summary: First-stage UEFI bootloader
|
||||
ExclusiveArch: aarch64
|
||||
License: BSD
|
||||
@ -39,9 +39,7 @@ Patch0007: 0007-shim-Properly-generate-absolute-paths-from-relative-.patch
|
||||
Patch0008: 0008-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch
|
||||
Patch0009: 0009-Fix-a-use-of-strlen-instead-of-Strlen.patch
|
||||
Patch0010: 0010-translate_slashes-don-t-write-to-string-literals.patch
|
||||
Patch0011: 0011-RHEL-9-disable-Wpointer-sign-for-now.patch
|
||||
|
||||
BuildRequires: gcc make
|
||||
BuildRequires: elfutils-libelf-devel
|
||||
BuildRequires: git openssl-devel openssl
|
||||
BuildRequires: pesign >= %{pesign_vre}
|
||||
@ -139,6 +137,10 @@ cd ..
|
||||
%files debugsource -f build-%{efiarch}/debugsource.list
|
||||
|
||||
%changelog
|
||||
* Tue Apr 06 2021 Peter Jones <pjones@redhat.com> - 15-7
|
||||
- Backport this to EL 8 so we can build-dep on the right version.
|
||||
Related: CVE-2020-14372 (and others)
|
||||
|
||||
* Tue May 26 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-6
|
||||
- Fix a shim crash when attempting to netboot
|
||||
Resolves: rhbz#1840036
|
||||
@ -161,19 +163,8 @@ cd ..
|
||||
- Fix MoK mirroring issue which breaks kdump without intervention
|
||||
Related: rhbz#1668966
|
||||
|
||||
* Thu Apr 05 2018 Peter Jones <pjones@redhat.com> - 15-1
|
||||
* Fri Jul 20 2018 Peter Jones <pjones@redhat.com> - 15-1
|
||||
- Update to shim 15
|
||||
- better checking for bad linker output
|
||||
- flicker-free console if there's no error output
|
||||
- improved http boot support
|
||||
- better protocol re-installation
|
||||
- dhcp proxy support
|
||||
- tpm measurement even when verification is disabled
|
||||
- REQUIRE_TPM build flag
|
||||
- more reproducable builds
|
||||
- measurement of everything verified through shim_verify()
|
||||
- coverity and scan-build checker make targets
|
||||
- misc cleanups
|
||||
|
||||
* Tue Sep 19 2017 Peter Jones <pjones@redhat.com> - 13-3
|
||||
- Actually update to the *real* 13 final.
|
8
build
8
build
@ -1,8 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
if [ $# -ne 1 ]; then
|
||||
echo "usage: ./build <release>" 1>&2
|
||||
exit 1
|
||||
fi
|
||||
arm-koji build $1 `fedpkg giturl`
|
||||
|
@ -1,6 +0,0 @@
|
||||
--- !Policy
|
||||
product_versions:
|
||||
- rhel-8
|
||||
decision_context: osci_compose_gate
|
||||
rules:
|
||||
- !PassingTestCaseRule {test_case_name: manual.sst_desktop.shim.functional}
|
BIN
rhtest.cer
BIN
rhtest.cer
Binary file not shown.
BIN
secureboot.cer
BIN
secureboot.cer
Binary file not shown.
Loading…
Reference in New Issue
Block a user