summaryrefslogtreecommitdiff
path: root/debian/signing-template/control.in
blob: 9d75d9259928060ebe22b9b9a732946e26f03508 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Source: shim-helpers-@arch@-signed
Section: admin
Priority: optional
Maintainer: Debian EFI team <debian-efi@lists.debian.org>
Standards-Version: 4.3.0
Build-Depends: debhelper (>= 10.1~),
 sbsigntool [amd64 arm64 i386],
 shim-unsigned (= @version_binary@),

Package: shim-helpers-@arch@-signed
Architecture: @arch@
Conflicts: shim (<< 15+1533136590.3beb971-3~),
Replaces: shim (<< 15+1533136590.3beb971-3~), shim-signed (<< 1.29),
Breaks: shim-signed (<< 1.29),
Depends: shim-unsigned (>= @version_binary@), ${misc:Depends},
Built-Using: shim (= @version_binary@)
Description: boot loader to chain-load signed boot loaders (signed by Debian)
 This package provides a minimalist boot loader which allows verifying
 signatures of other UEFI binaries against either the Secure Boot DB/DBX or
 against a built-in signature database.  Its purpose is to allow a small,
 infrequently-changing binary to be signed by the UEFI CA, while allowing
 an OS distributor to revision their main bootloader independently of the CA.
 .
 This package contains the MOK manager and fall-back manager signed by the
 Debian UEFI CA to be used by shim-signed.