Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package shim for openSUSE:Factory checked in
at 2022-08-05 19:50:25
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/shim (Old)
and /work/SRC/openSUSE:Factory/.shim.new.1521 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "shim"
Fri Aug 5 19:50:25 2022 rev:103 rq:993204 version:15.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/shim/shim.changes 2022-07-31
23:01:04.847715594 +0200
+++ /work/SRC/openSUSE:Factory/.shim.new.1521/shim.changes 2022-08-05
19:50:56.657446872 +0200
@@ -1,0 +2,6 @@
+Fri Aug 5 05:25:16 UTC 2022 - Joey Lee <j...@suse.com>
+
+- Add logic to shim.spec for detecting --set-sbat-policy option before
+ using mokutil to set sbat policy. (bsc#1202120)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ shim.spec ++++++
--- /var/tmp/diff_new_pack.9b1OOX/_old 2022-08-05 19:50:57.353448670 +0200
+++ /var/tmp/diff_new_pack.9b1OOX/_new 2022-08-05 19:50:57.357448679 +0200
@@ -308,7 +308,8 @@
# run mokutil for setting sbat policy to latest mode
SBAT_POLICY=/sys/firmware/efi/efivars/SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23
if is_efi; then
- if [ ! -f "$SBAT_POLICY" ]; then
+ if [ ! -f "$SBAT_POLICY" ] && mokutil -h | grep -q "set-sbat-policy";
then
+ # Only apply CA check on the kernel package certs (bsc#1173115)
mokutil --set-sbat-policy latest
fi
fi
