diff options
| author | Steve McIntyre <steve@einval.com> | 2024-05-04 14:36:15 +0100 |
|---|---|---|
| committer | Steve McIntyre <steve@einval.com> | 2024-05-04 14:39:26 +0100 |
| commit | 38e5a617e4131702b098fe2d2d0aa00e70072760 (patch) | |
| tree | ecfbcb808de2ead4a52a4d901ba5594f6661de88 | |
| parent | 11622ef49a4005d7d3bf2ce7fe395c0c1d820660 (diff) | |
| download | efi-boot-shim-38e5a617e4131702b098fe2d2d0aa00e70072760.tar.gz efi-boot-shim-38e5a617e4131702b098fe2d2d0aa00e70072760.zip | |
Install a copy of the Debian CA certificate into /usr/share/shim.
Closes: #1069054
| -rw-r--r-- | debian/changelog | 2 | ||||
| -rwxr-xr-x | debian/rules | 2 | ||||
| -rw-r--r-- | debian/shim-unsigned.dirs | 1 |
3 files changed, 5 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 7bc09f12..17950882 100644 --- a/debian/changelog +++ b/debian/changelog @@ -29,6 +29,8 @@ shim (15.8-1) UNRELEASED; urgency=medium * Force shim to use the latest revocations by default to block some older grub / peimage issues. This is: "shim,4\ngrub,4\ngrub.peimage,2\n" + * Install a copy of the Debian CA certificate into /usr/share/shim. + Closes: #1069054 [ Bastien Roucariès ] * Port autopkgtest from ubuntu diff --git a/debian/rules b/debian/rules index 5edabe1b..363bcb2d 100755 --- a/debian/rules +++ b/debian/rules @@ -87,6 +87,8 @@ override_dh_auto_install: # not needed for our build and causes debhelper to complain rm -f debian/tmp/boot/efi/EFI/BOOT/BOOT*.EFI + install -m 644 $(cert) debian/shim-unsigned/usr/share/shim + # Generate the template packages that we'll use for SB signing later ./debian/signing-template.generate diff --git a/debian/shim-unsigned.dirs b/debian/shim-unsigned.dirs new file mode 100644 index 00000000..01c0a052 --- /dev/null +++ b/debian/shim-unsigned.dirs @@ -0,0 +1 @@ +/usr/share/shim |