shim-signed/debian/source_shim-signed.py
Steve Langasek bf3018eb13 Import Debian version 1.28
shim-signed (1.28) unstable; urgency=medium

  * Initial Debian upload, based on Ubuntu package.
2019-03-06 21:15:15 +00:00

56 lines
1.8 KiB
Python

'''apport package hook for shim and shim-signed
(c) 2015 Canonical Ltd.
Author: Brian Murray <brian@ubuntu.com>
'''
import errno
import os
from apport.hookutils import (
command_available,
command_output,
attach_file,
attach_root_command_outputs)
efiarch = {'amd64': 'x64',
'i386': 'ia32',
'arm64': 'aarch64'
}
grubarch = {'amd64': 'x86_64',
'i386': 'i386',
'arm64': 'arm64'
}
def add_info(report, ui):
efiboot = '/boot/efi/EFI/ubuntu'
if command_available('efibootmgr'):
report['EFIBootMgr'] = command_output(['efibootmgr', '-v'])
else:
report['EFIBootMgr'] = 'efibootmgr not available'
commands = {}
try:
directory = os.stat(efiboot)
except OSError as e:
if e.errno == errno.ENOENT:
report['Missing'] = '/boot/efi/EFI/ubuntu directory is missing'
return
if e.errno == errno.EACCES:
directory= True
if directory:
arch = report['Architecture']
commands['BootEFIContents'] = 'ls %s' % efiboot
commands['ShimDiff'] = 'diff %s/shim%s.efi /usr/lib/shim/shim%s.efi.signed' % (efiboot, efiarch[arch], efiarch[arch])
commands['GrubDiff'] = 'diff %s/grub%s.efi /usr/lib/grub/%s-efi-signed/grub%s.efi.signed' %(efiboot, efiarch[arch], grubarch[arch], efiarch[arch])
attach_root_command_outputs(report, commands)
efivars_dir = '/sys/firmware/efi/efivars'
sb_var = os.path.join(efivars_dir,
'SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c')
mok_var = os.path.join(efivars_dir,
'MokSBStateRT-605dab50-e046-4300-abb6-3dd810dd8b23')
attach_file(report, '/proc/sys/kernel/moksbstate_disabled')
attach_file(report, sb_var)
attach_file(report, mok_var)