efi-boot-shim.git/debian, branch debian/15.3-2 (mirror of https://github.com/vyos/efi-boot-shim.git) https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=debian%2F15.3-2 2021-03-24T02:21:53+00:00 Add missing build-dep on xxd for build-time unit tests 2021-03-24T02:21:53+00:00 Steve McIntyre steve@einval.com 2021-03-24T02:21:53+00:00 urn:sha1:f1d23e72937053fe821b35737f3deb1a41303f8d Switch to using the 15.3 release from upstream 2021-03-23T23:43:27+00:00 Steve McIntyre steve@einval.com 2021-03-23T23:43:27+00:00 urn:sha1:85b409232ce89b34626df9d72abedf5d4f5ccef6 Remove all out outstanding patches 2021-03-23T23:38:30+00:00 Steve McIntyre steve@einval.com 2021-03-23T23:38:30+00:00 urn:sha1:f43e9abcc596c1b2934e7f43bddf173f74f3866c * cast-CHAR8-string-handling.patch no longer needed * fix-Make.coverity-bashisms.patch went upstream Update copyright file 2021-03-23T23:34:12+00:00 Steve McIntyre steve@einval.com 2021-03-15T21:39:49+00:00 urn:sha1:e6b19d2db7be7f9535cc06ecb8493e1336c7b78d Update a couple of top-level changes, copy in gnu-efi information from the gnu-efi package Fix up some of the options we're using at build time 2021-03-23T23:33:13+00:00 Steve McIntyre steve@einval.com 2021-03-15T20:19:01+00:00 urn:sha1:57e2a32beff477648d2ea608ecefb10499a9a10c Definitely don't want to be setting EFI_PATH, as that over-rides the vendored gnu-efi. Argh Improve how the dbx hashes are handled 2021-03-23T23:33:04+00:00 Steve McIntyre steve@einval.com 2021-03-14T16:04:15+00:00 urn:sha1:de3def7f5365e0b567606c3b7b63df2f0525af35 Only include the hashes for the architecture we're building for - no point in adding bloat and delay here. Add a script "block_signed_deb" to scan a set of .deb files, extract the hashes for .efi binaries and list them in the format wanted for the dbx hashes file. Split out the code to use that file from the rules file into a separate helper. Tweak the gnu-efi tarball code 2021-03-23T23:32:57+00:00 Steve McIntyre steve@einval.com 2021-03-13T20:00:58+00:00 urn:sha1:3139bb3585d443a96ed7b9f5fdfbb49b6af281af Add an extra rule to generate the extra gnu-efi tarball 2021-03-23T23:32:52+00:00 Steve McIntyre steve@einval.com 2021-03-13T19:43:00+00:00 urn:sha1:9b014236c8b4113aeae40b452e35208cf0397d1a Thanks to Dmitri John Ledkov for help Add Debian SBAT data to the shim build 2021-03-23T23:32:45+00:00 Steve McIntyre steve@einval.com 2021-03-13T19:06:37+00:00 urn:sha1:2e0a83e1f2e1d1cf76a4082eb14dd7f9b11eda2d Add a Debian SBAT template, and rules to use it Adds a build-dep on dos2unix Add dbx entries for all our existing grub binaries 2021-03-23T23:32:38+00:00 Steve McIntyre steve@einval.com 2021-03-13T18:59:25+00:00 urn:sha1:58195ca37eab3e633c7d77c1581ed2d6ff20499c They're insecure, let's break the chainloading hole