diff --git a/SOURCES/almalinuxdup1.x509 b/SOURCES/almalinuxdup1.x509 new file mode 100644 index 0000000..2972014 Binary files /dev/null and b/SOURCES/almalinuxdup1.x509 differ diff --git a/SOURCES/almalinuxkpatch1.x509 b/SOURCES/almalinuxkpatch1.x509 new file mode 100644 index 0000000..1292610 Binary files /dev/null and b/SOURCES/almalinuxkpatch1.x509 differ diff --git a/SOURCES/x509.genkey b/SOURCES/x509.genkey index b1bbe38..4c34491 100644 --- a/SOURCES/x509.genkey +++ b/SOURCES/x509.genkey @@ -5,9 +5,9 @@ prompt = no x509_extensions = myexts [ req_distinguished_name ] -O = Red Hat -CN = Red Hat Enterprise Linux kernel signing key -emailAddress = secalert@redhat.com +O = AlmaLinux +CN = AlmaLinux kernel signing key +emailAddress = security@almalinux.org [ myexts ] basicConstraints=critical,CA:FALSE diff --git a/SPECS/kernel-lt-6.1.spec b/SPECS/kernel-lt-6.1.spec index 0740946..4a9e93b 100644 --- a/SPECS/kernel-lt-6.1.spec +++ b/SPECS/kernel-lt-6.1.spec @@ -55,13 +55,6 @@ %global signmodules 0 %endif -### BCAT -# Further investigation is required before these features -# are enabled for the ELRepo Project kernels. -%global signkernel 0 -%global signmodules 0 -### BCAT - # Compress modules on all architectures that build modules. %ifarch x86_64 || aarch64 %global zipmodules 1 @@ -159,7 +152,7 @@ %define initrd_prereq dracut >= 027 Name: kernel-lt -Summary: The Linux kernel. (The core of any Linux kernel based operating system.) +Summary: Alternative AlmaLinux kernel based on the "longterm" branch. (The core of any Linux kernel based operating system.) License: GPLv2 and Redistributable, no modification permitted. URL: https://www.kernel.org/ Version: %{pkg_version} @@ -237,8 +230,8 @@ Source34: filter-x86_64.sh Source37: filter-aarch64.sh Source40: filter-modules.sh -Source100: rheldup3.x509 -Source101: rhelkpatch1.x509 +Source100: almalinuxdup1.x509 +Source101: almalinuxkpatch1.x509 Source2000: cpupower.service Source2001: cpupower.config @@ -254,7 +247,7 @@ NoSource: 0 %define secureboot_ca_0 %{_datadir}/pki/sb-certs/secureboot-ca-%{_arch}.cer %define secureboot_key_0 %{_datadir}/pki/sb-certs/secureboot-kernel-%{_arch}.cer -%define pesign_name_0 redhatsecureboot501 +%define pesign_name_0 clsecureboot001 %endif %description