mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-10-04 09:55:33 +00:00
7686debad8
We used to use efisiglist to generate the DBX list. Newer versions of the pesign package don't include it any more, and the recommended replacement tool is now efisecdb from efivar. Tweak the generate_dbx_list script to work with both old and new. Let's make backports easy...
54 lines
2.0 KiB
Plaintext
54 lines
2.0 KiB
Plaintext
Source: shim
|
|
Section: admin
|
|
Priority: optional
|
|
Maintainer: Debian EFI team <debian-efi@lists.debian.org>
|
|
Uploaders: Steve Langasek <vorlon@debian.org>, Steve McIntyre <93sam@debian.org>
|
|
Standards-Version: 4.6.2
|
|
Build-Depends: debhelper-compat (= 12),
|
|
gnu-efi (>= 3.0u),
|
|
sbsigntool,
|
|
openssl,
|
|
libelf-dev,
|
|
gcc-12,
|
|
dos2unix,
|
|
pesign (>= 0.112-5),
|
|
efivar,
|
|
uuid-runtime,
|
|
xxd,
|
|
libefivar-dev
|
|
Vcs-Browser: https://salsa.debian.org/efi-team/shim
|
|
Vcs-Git: https://salsa.debian.org/efi-team/shim.git
|
|
|
|
Package: shim-unsigned
|
|
Architecture: amd64 arm64 i386
|
|
Depends: ${shlibs:Depends}, ${misc:Depends}
|
|
Conflicts: shim (<< 15+1533136590.3beb971-3~),
|
|
Replaces: shim (<< 15+1533136590.3beb971-3~),
|
|
Description: boot loader to chain-load signed boot loaders under Secure Boot
|
|
This package provides a minimalist boot loader which allows verifying
|
|
signatures of other UEFI binaries against either the Secure Boot DB/DBX or
|
|
against a built-in signature database. Its purpose is to allow a small,
|
|
infrequently-changing binary to be signed by the UEFI CA, while allowing
|
|
an OS distributor to revision their main bootloader independently of the CA.
|
|
|
|
Package: shim-helpers-amd64-signed-template
|
|
Architecture: amd64
|
|
Depends: ${misc:Depends},
|
|
Description: boot loader to chain-load signed boot loaders (signing template)
|
|
This package contains template files for shim-helpers-amd64-signed.
|
|
This is only needed for Secure Boot signing.
|
|
|
|
Package: shim-helpers-i386-signed-template
|
|
Architecture: i386
|
|
Depends: ${misc:Depends},
|
|
Description: boot loader to chain-load signed boot loaders (signing template)
|
|
This package contains template files for shim-helpers-i386-signed.
|
|
This is only needed for Secure Boot signing.
|
|
|
|
Package: shim-helpers-arm64-signed-template
|
|
Architecture: arm64
|
|
Depends: ${misc:Depends},
|
|
Description: boot loader to chain-load signed boot loaders (signing template)
|
|
This package contains template files for shim-helpers-arm64-signed.
|
|
This is only needed for Secure Boot signing.
|