Install a copy of the Debian CA certificate into /usr/share/shim.

Closes: #1069054
This commit is contained in:
Steve McIntyre 2024-05-04 14:36:15 +01:00
parent 91350387a8
commit 9b91206a20
3 changed files with 5 additions and 0 deletions

2
debian/changelog vendored
View File

@ -17,6 +17,8 @@ shim (15.8-1~deb12u1) bookworm; urgency=medium
* Force shim to use the latest revocations by default to block some
older grub / peimage issues. This is:
"shim,4\ngrub,4\ngrub.peimage,2\n"
* Install a copy of the Debian CA certificate into /usr/share/shim.
Closes: #1069054
[ Bastien Roucariès ]
* Port autopkgtest from ubuntu

2
debian/rules vendored
View File

@ -87,6 +87,8 @@ override_dh_auto_install:
# not needed for our build and causes debhelper to complain
rm -f debian/tmp/boot/efi/EFI/BOOT/BOOT*.EFI
install -m 644 $(cert) debian/shim-unsigned/usr/share/shim
# Generate the template packages that we'll use for SB signing later
./debian/signing-template.generate

1
debian/shim-unsigned.dirs vendored Normal file
View File

@ -0,0 +1 @@
/usr/share/shim