From 3cf4042d82ef314f19e9f7bd4f86c4b59efd8233 Mon Sep 17 00:00:00 2001
From: Steve McIntyre <steve@einval.com>
Date: Sat, 17 Feb 2024 17:19:57 +0000
Subject: [PATCH] Tweak the UUID handling to be clearer

---
 debian/generate_dbx_list | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/debian/generate_dbx_list b/debian/generate_dbx_list
index 9f76894..5fbd9c4 100755
--- a/debian/generate_dbx_list
+++ b/debian/generate_dbx_list
@@ -16,9 +16,11 @@ ARCH=$1
 IN=$2
 OUT=$3
 
+DEBIAN_UUID="fa31923d-6047-40bf-81d0-e63edefcf194"
+
 # This needs to be fixed to make builds reproducible, of course. If
 # you're deriving from Debian, please generate your own.
-DEBIAN_UUID="fa31923d-6047-40bf-81d0-e63edefcf194"
+UUID="$DEBIAN_UUID"
 
 rm -f $OUT
 if [ -x /usr/bin/efisiglist ] ; then
@@ -36,7 +38,7 @@ else
     for HASH in $(grep -E "[[:xdigit:]]{32} $ARCH" < $IN | \
 		      awk '{print $1}' | sort | uniq); do
 	echo "  Adding $HASH to dbx list"
-	efisecdb -g "$DEBIAN_UUID" -a -t sha256 -h $HASH $INTMP -o $OUT
+	efisecdb -g "$UUID" -a -t sha256 -h $HASH $INTMP -o $OUT
 
 	# Subsequent passes need to read the previous output as input
 	# each time, and won't overwrite the output.