diff options
| -rw-r--r-- | debian/changelog | 2 | ||||
| -rwxr-xr-x | debian/rules | 2 | ||||
| -rw-r--r-- | debian/shim-unsigned.dirs | 1 |
3 files changed, 5 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 7bc09f12..17950882 100644 --- a/debian/changelog +++ b/debian/changelog @@ -29,6 +29,8 @@ shim (15.8-1) UNRELEASED; urgency=medium * Force shim to use the latest revocations by default to block some older grub / peimage issues. This is: "shim,4\ngrub,4\ngrub.peimage,2\n" + * Install a copy of the Debian CA certificate into /usr/share/shim. + Closes: #1069054 [ Bastien Roucariès ] * Port autopkgtest from ubuntu diff --git a/debian/rules b/debian/rules index 5edabe1b..363bcb2d 100755 --- a/debian/rules +++ b/debian/rules @@ -87,6 +87,8 @@ override_dh_auto_install: # not needed for our build and causes debhelper to complain rm -f debian/tmp/boot/efi/EFI/BOOT/BOOT*.EFI + install -m 644 $(cert) debian/shim-unsigned/usr/share/shim + # Generate the template packages that we'll use for SB signing later ./debian/signing-template.generate diff --git a/debian/shim-unsigned.dirs b/debian/shim-unsigned.dirs new file mode 100644 index 00000000..01c0a052 --- /dev/null +++ b/debian/shim-unsigned.dirs @@ -0,0 +1 @@ +/usr/share/shim |