summaryrefslogtreecommitdiff
path: root/debian
diff options
context:
space:
mode:
authorSteve McIntyre <steve@einval.com>2023-02-18 00:09:43 +0000
committerSteve McIntyre <steve@einval.com>2023-02-18 00:09:43 +0000
commit730d7a4eacd6b5a0ede0806cc5c7af58c6b1cb99 (patch)
tree39ebe0af0071fbbf0b79b687cb1d0cc7308613bd /debian
parent99e1903af88a7d0eddb0443a8f81e3d5c92946c4 (diff)
downloadshim-signed-730d7a4eacd6b5a0ede0806cc5c7af58c6b1cb99.tar.gz
shim-signed-730d7a4eacd6b5a0ede0806cc5c7af58c6b1cb99.zip
Remove the NEWS file, now we have working arm64 shim-signed
Diffstat (limited to 'debian')
-rw-r--r--debian/shim-signed.NEWS30
1 files changed, 0 insertions, 30 deletions
diff --git a/debian/shim-signed.NEWS b/debian/shim-signed.NEWS
deleted file mode 100644
index 4b2bada..0000000
--- a/debian/shim-signed.NEWS
+++ /dev/null
@@ -1,30 +0,0 @@
-shim-signed (1.34) unstable; urgency=medium
-
- Debian no longer supports UEFI Secure Boot on arm64 systems
-
- Shim and other EFI programs have always been difficult to build on
- arm64, compared to x86 platforms. Binutils for amd64 and i386
- includes explicit support for creating programs in the PE/COFF
- binary format that EFI uses, but this has never been added for
- arm64.
-
- In the past, shim developers added some local hacks into the shim
- package to generate a *mostly*-compliant PE/COFF EFI binary without
- this toolchain support, and that seemed to be sufficient for
- use. Everything seemed to work. *However*, during the development
- and testing phase of shim 15.3 and 15.4, we found significant
- issues with this approach. New security features needed in shim
- (SBAT) showed up severe problems with the lack of proper toolchain
- support. See https://github.com/rhboot/shim/issues/366 for more
- details. The old hacks around binutils are no longer sustainable.
-
- Statistics tell us that very few people have attempted to use arm64
- Secure Boot with Debian so far. In the interests of releasing needed
- updates in a timely manner, we have decided *for the time being* to
- disable signed shim support for Debian arm64.
-
- We hope to re-introduce arm64 Secure Boot support as soon as
- possible in the future.
-
- -- Steve McIntyre <93sam@debian.org> Mon, 03 May 2021 18:28:58 +0100
-