mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-06-24 17:27:39 +00:00

In cases where we accept vendor shim binaries with additional patches, it may become necessary to identify those builds with additional SBAT data. When we consider such patches, we should be proactive in asking vendors to include that data in the .sbat sections of their trusted EFI binaries. This patch adds any data in data/sbat.*.csv (after a quick sanitizing pass) after data/sbat.csv in the .sbat section, so that no changes to the upstream data/sbat.csv are ever required. Signed-off-by: Peter Jones <pjones@redhat.com>
9 lines
164 B
Plaintext
9 lines
164 B
Plaintext
define get-config
|
|
$(shell git config --local --get "shim.$(1)")
|
|
endef
|
|
|
|
define add-vendor-sbat
|
|
$(OBJCOPY) --add-section ".$(patsubst %.csv,%,$(1))=$(1)" $(2)
|
|
|
|
endef
|