efi-boot-shim/debian/control
Philipp Hahn f7add2255f Add shim-$arch-signed-template support
for getting the MOK-manager and fall-back binary to be signed by Debians
singing service instead of using an ephemeral key.

Closes: #922228
2019-02-15 21:26:05 +00:00

42 lines
1.7 KiB
Plaintext

Source: shim
Section: admin
Priority: optional
Maintainer: Steve Langasek <vorlon@debian.org>
Standards-Version: 4.3.0
Build-Depends: debhelper (>= 9), gnu-efi (>= 3.0u), sbsigntool, openssl, libelf-dev
Vcs-Browser: https://salsa.debian.org/vorlon/shim
Vcs-Git: https://salsa.debian.org/vorlon/shim.git
Package: shim-unsigned
Architecture: amd64 arm64 i386
Depends: ${shlibs:Depends}, ${misc:Depends}
Conflicts: shim (<< 15+1533136590.3beb971-3~),
Replaces: shim (<< 15+1533136590.3beb971-3~),
Description: boot loader to chain-load signed boot loaders under Secure Boot
This package provides a minimalist boot loader which allows verifying
signatures of other UEFI binaries against either the Secure Boot DB/DBX or
against a built-in signature database. Its purpose is to allow a small,
infrequently-changing binary to be signed by the UEFI CA, while allowing
an OS distributor to revision their main bootloader independently of the CA.
Package: shim-amd64-signed-template
Architecture: amd64
Depends: ${misc:Depends},
Description: boot loader to chain-load signed boot loaders (signing template)
This package contains template files for shim-amd64-signed.
This is only needed for Secure Boot singing.
Package: shim-i386-signed-template
Architecture: i386
Depends: ${misc:Depends},
Description: boot loader to chain-load signed boot loaders (signing template)
This package contains template files for shim-i386-signed.
This is only needed for Secure Boot singing.
Package: shim-arm64-signed-template
Architecture: arm64
Depends: ${misc:Depends},
Description: boot loader to chain-load signed boot loaders (signing template)
This package contains template files for shim-arm64-signed.
This is only needed for Secure Boot singing.