From 28e8f71ef2a18134ef2f11bd5ec237c7a4833707 Mon Sep 17 00:00:00 2001 From: Steve McIntyre <93sam@debian.org> Date: Tue, 7 May 2019 11:05:48 +0100 Subject: Add an empty list of hashes for the Ubuntu build so they'll get an empty dbs list rather than breaking the build --- debian/ubuntu-dbx.hashes | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 debian/ubuntu-dbx.hashes diff --git a/debian/ubuntu-dbx.hashes b/debian/ubuntu-dbx.hashes new file mode 100644 index 00000000..b33fc101 --- /dev/null +++ b/debian/ubuntu-dbx.hashes @@ -0,0 +1,17 @@ +# ubuntu-dbx.hashes +# +# This file contains the sha256 sums of the binaries that we want to +# blacklist directly in our signed shim. Add entries below, with comments +# to explain each entry (where possible). +# +# Format of this file: put hex-encoded sha256 checksums on lines on +# their own. I'm using shell-style comments just for clarity. +# +# The hashes are generated using: +# +# pesign --hash -in +# +# on *either* the signed or unsigned binary, pesign doesn't care +# which. + +# ... This file intentionally left blank for now ... -- cgit v1.2.3