diff options
| -rw-r--r-- | debian/changelog | 4 | ||||
| -rwxr-xr-x | debian/rules | 5 |
2 files changed, 9 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 8f0d7025..d0f5fcf7 100644 --- a/debian/changelog +++ b/debian/changelog @@ -17,6 +17,10 @@ shim (15.8-1) UNRELEASED; urgency=medium + Debian kernels are no longer signed for i386, it's time to stop supporting i386 SB. * Log if the build is nx-compatible or not + * Force shim to use the latest revocations by default to block some + older grub / peimage issues. This is: + "shim,4\ngrub,4\ngrub.peimage,2\n" + [ Bastien Roucariès ] * Port autopkgtest from ubuntu diff --git a/debian/rules b/debian/rules index 39d0357e..5edabe1b 100755 --- a/debian/rules +++ b/debian/rules @@ -48,6 +48,11 @@ COMMON_OPTIONS += \ CC=$(DEB_HOST_GNU_TYPE)-gcc-12 \ $(NULL) +# Force shim to use the latest revocations by default to block some +# older grub / peimage issues. This is: +# "shim,4\ngrub,4\ngrub.peimage,2\n" +COMMON_OPTIONS += SBAT_AUTOMATIC_DATE=2024010900 + $(DBX_LIST): $(DBX_HASHES) ./debian/generate_dbx_list $(EFI_ARCH) $< $@ |