diff options
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/changelog | 13 | ||||
| -rw-r--r-- | debian/control | 2 |
2 files changed, 14 insertions, 1 deletions
diff --git a/debian/changelog b/debian/changelog index 445c312..a040b2a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,16 @@ +shim-signed (1.47) unstable; urgency=medium + + * update-secureboot-policy: do better checking around DKMS + If we have DKMS modules installed: + + Check to see if a DKMS MOK key has been created and enrolled; + + Check that all the DKMS modules are signed with that key; + If successful, don't tell users to disable Secure Boot. + Closes: #1108278. + Add dependencies on openssl and kmod for shim-signed-common, + needed for implementing these check. + + -- Steve McIntyre <93sam@debian.org> Tue, 29 Jul 2025 18:40:14 +0100 + shim-signed (1.46) unstable; urgency=medium * No-change rebuild to upload source-only. Argh. :-/ diff --git a/debian/control b/debian/control index aa726e8..8357ba8 100644 --- a/debian/control +++ b/debian/control @@ -40,7 +40,7 @@ Description: Secure Boot chain-loading bootloader (Microsoft-signed binary) Package: shim-signed-common Multi-Arch: foreign Architecture: all -Depends: ${misc:Depends}, mokutil +Depends: ${misc:Depends}, mokutil, openssl, kmod Replaces: shim-signed (<< 1.32+15+1533136590.3beb971-5) Breaks: shim-signed (<< 1.32+15+1533136590.3beb971-5) Description: Secure Boot chain-loading bootloader (common helper scripts) |