diff --git a/debian/changelog b/debian/changelog
index 0c33fcb..d445ec4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -21,6 +21,8 @@ shim (12+1503074702.5202f80-0ubuntu1) UNRELEASED; urgency=medium
   * debian/patches/fix_makefile_phony.patch: fix a makefile bug causing shim
     to fail to build, because it gets confused about the .signed efi files.
   * debian/rules: clean up after *.signed files.
+  * debian/shim.install: update paths in light of using shim's upstream install
+    target.
 
  -- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com>  Tue, 29 Aug 2017 13:55:45 -0400
 
diff --git a/debian/shim.install b/debian/shim.install
index f37f6d1..0f5a04b 100644
--- a/debian/shim.install
+++ b/debian/shim.install
@@ -1,3 +1,3 @@
-shim*.efi /usr/lib/shim
-mm*.efi.signed /usr/lib/shim
-fb*.efi.signed /usr/lib/shim
+/boot/efi/EFI/ubuntu/shim*.efi /usr/lib/shim
+/boot/efi/EFI/ubuntu/mm*.efi.signed /usr/lib/shim
+/boot/efi/EFI/ubuntu/fb*.efi.signed /usr/lib/shim