diff options
| author | Steve McIntyre <steve@einval.com> | 2023-02-18 00:09:43 +0000 |
|---|---|---|
| committer | Steve McIntyre <steve@einval.com> | 2023-02-18 00:09:43 +0000 |
| commit | 730d7a4eacd6b5a0ede0806cc5c7af58c6b1cb99 (patch) | |
| tree | 39ebe0af0071fbbf0b79b687cb1d0cc7308613bd /debian | |
| parent | 99e1903af88a7d0eddb0443a8f81e3d5c92946c4 (diff) | |
| download | shim-signed-730d7a4eacd6b5a0ede0806cc5c7af58c6b1cb99.tar.gz shim-signed-730d7a4eacd6b5a0ede0806cc5c7af58c6b1cb99.zip | |
Remove the NEWS file, now we have working arm64 shim-signed
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/shim-signed.NEWS | 30 |
1 files changed, 0 insertions, 30 deletions
diff --git a/debian/shim-signed.NEWS b/debian/shim-signed.NEWS deleted file mode 100644 index 4b2bada..0000000 --- a/debian/shim-signed.NEWS +++ /dev/null @@ -1,30 +0,0 @@ -shim-signed (1.34) unstable; urgency=medium - - Debian no longer supports UEFI Secure Boot on arm64 systems - - Shim and other EFI programs have always been difficult to build on - arm64, compared to x86 platforms. Binutils for amd64 and i386 - includes explicit support for creating programs in the PE/COFF - binary format that EFI uses, but this has never been added for - arm64. - - In the past, shim developers added some local hacks into the shim - package to generate a *mostly*-compliant PE/COFF EFI binary without - this toolchain support, and that seemed to be sufficient for - use. Everything seemed to work. *However*, during the development - and testing phase of shim 15.3 and 15.4, we found significant - issues with this approach. New security features needed in shim - (SBAT) showed up severe problems with the lack of proper toolchain - support. See https://github.com/rhboot/shim/issues/366 for more - details. The old hacks around binutils are no longer sustainable. - - Statistics tell us that very few people have attempted to use arm64 - Secure Boot with Debian so far. In the interests of releasing needed - updates in a timely manner, we have decided *for the time being* to - disable signed shim support for Debian arm64. - - We hope to re-introduce arm64 Secure Boot support as soon as - possible in the future. - - -- Steve McIntyre <93sam@debian.org> Mon, 03 May 2021 18:28:58 +0100 - |
