From c2dbb9ef4e27e28883a14a7d28777fa3c776f557 Mon Sep 17 00:00:00 2001 From: Philipp Hahn Date: Sun, 8 Apr 2018 11:09:10 +0200 Subject: Rename to shim-unsigned as all EFI binaries are now unsigned. They are useless to any normal user as - shim is useless without being signed by an external UEFI CA. - mm and fb won't be loaded by shim as they are now no longer linked to corresponding shim by the ephemeral key any longer. --- debian/changelog | 1 + debian/control | 4 +++- debian/shim-unsigned.install | 4 ++++ debian/shim.install | 4 ---- 4 files changed, 8 insertions(+), 5 deletions(-) create mode 100644 debian/shim-unsigned.install delete mode 100644 debian/shim.install diff --git a/debian/changelog b/debian/changelog index 0c22f576..fa73d1d1 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,6 +3,7 @@ shim (15+1533136590.3beb971-3) UNRELEASED; urgency=medium [ Philipp Hahn ] * debian/rules: fixing permissions no longer required * debian/rules: Disable ephemeral key on Debian. + * Rename binary package to 'shim-unsigned' -- Luca Boccassi Fri, 15 Feb 2019 19:50:10 +0000 diff --git a/debian/control b/debian/control index 259bc094..58538d5d 100644 --- a/debian/control +++ b/debian/control @@ -7,9 +7,11 @@ Build-Depends: debhelper (>= 9), gnu-efi (>= 3.0u), sbsigntool, openssl, libelf- Vcs-Browser: https://salsa.debian.org/vorlon/shim Vcs-Git: https://salsa.debian.org/vorlon/shim.git -Package: shim +Package: shim-unsigned Architecture: amd64 arm64 i386 Depends: ${shlibs:Depends}, ${misc:Depends} +Conflicts: shim (<< 15+1533136590.3beb971-3~), +Replaces: shim (<< 15+1533136590.3beb971-3~), Description: boot loader to chain-load signed boot loaders under Secure Boot This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or diff --git a/debian/shim-unsigned.install b/debian/shim-unsigned.install new file mode 100644 index 00000000..268df256 --- /dev/null +++ b/debian/shim-unsigned.install @@ -0,0 +1,4 @@ +/boot/efi/EFI/*/shim*.efi /usr/lib/shim +/boot/efi/EFI/*/mm*.efi /usr/lib/shim +/boot/efi/EFI/*/fb*.efi /usr/lib/shim +/boot/efi/EFI/*/BOOT*.CSV /usr/lib/shim diff --git a/debian/shim.install b/debian/shim.install deleted file mode 100644 index 268df256..00000000 --- a/debian/shim.install +++ /dev/null @@ -1,4 +0,0 @@ -/boot/efi/EFI/*/shim*.efi /usr/lib/shim -/boot/efi/EFI/*/mm*.efi /usr/lib/shim -/boot/efi/EFI/*/fb*.efi /usr/lib/shim -/boot/efi/EFI/*/BOOT*.CSV /usr/lib/shim -- cgit v1.2.3