Hello community, here is the log from the commit of package shim-leap for openSUSE:Factory checked in at 2020-08-29 20:38:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/shim-leap (Old) and /work/SRC/openSUSE:Factory/.shim-leap.new.3399 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "shim-leap" Sat Aug 29 20:38:52 2020 rev:14 rq:829908 version:15+git47 Changes: -------- --- /work/SRC/openSUSE:Factory/shim-leap/shim-leap.changes 2020-08-12 10:37:24.076318177 +0200 +++ /work/SRC/openSUSE:Factory/.shim-leap.new.3399/shim-leap.changes 2020-08-29 20:39:00.913381202 +0200 @@ -1,0 +2,7 @@ +Thu Aug 27 07:27:54 UTC 2020 - Gary Ching-Pang Lin <[email protected]> + +- Update shim to 15+git47-lp152.4.5.1 from openSUSE Leap 15.2 + + shim-install: install MokManager to \EFI\boot to process the + pending MOK request (bsc#1175626, bsc#1175656) + +------------------------------------------------------------------- Old: ---- shim-15+git47-lp152.4.3.1.x86_64.rpm New: ---- shim-15+git47-lp152.4.5.1.x86_64.rpm ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ shim-leap.spec ++++++ --- /var/tmp/diff_new_pack.pPMUK1/_old 2020-08-29 20:39:01.849381596 +0200 +++ /var/tmp/diff_new_pack.pPMUK1/_new 2020-08-29 20:39:01.853381598 +0200 @@ -30,7 +30,7 @@ Summary: UEFI shim loader License: BSD-2-Clause Group: System/Boot -Source: shim-15+git47-lp152.4.3.1.x86_64.rpm +Source: shim-15+git47-lp152.4.5.1.x86_64.rpm BuildRoot: %{_tmppath}/%{name}-%{version}-build ExclusiveArch: x86_64 ++++++ shim-15+git47-lp152.4.3.1.x86_64.rpm -> shim-15+git47-lp152.4.5.1.x86_64.rpm ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/usr/sbin/shim-install new/usr/sbin/shim-install --- old/usr/sbin/shim-install 2020-08-10 18:31:22.000000000 +0200 +++ new/usr/sbin/shim-install 2020-08-24 17:48:08.000000000 +0200 @@ -260,6 +260,8 @@ if test "$update_boot" = "yes"; then rm -f "${efibootdir}/${def_boot_efi}" rm -f "${efibootdir}/fallback.efi" + # bsc#1175626, bsc#1175656 also clean up MokManager + rm -f "${efibootdir}/MokManager.efi" fi if test "$no_nvram" = no && test -n "$bootloader_id"; then # Delete old entries from the same distributor. @@ -296,6 +298,11 @@ cp "${source_dir}/shim.efi" "${efibootdir}/${def_boot_efi}" if test "$removable" = "no"; then cp "${source_dir}/fallback.efi" "${efibootdir}" + # bsc#1175626, bsc#1175656 Since shim 15, loading MokManager becomes + # mandatory if a MOK request exists. Copy MokManager to \EFI\boot so + # that boot*.efi can load MokManager to process the request instead + # of shutting down the system immediately. + cp "${source_dir}/MokManager.efi" "${efibootdir}" fi fi Binary files old/usr/share/efi/x86_64/MokManager.efi and new/usr/share/efi/x86_64/MokManager.efi differ Binary files old/usr/share/efi/x86_64/fallback.efi and new/usr/share/efi/x86_64/fallback.efi differ Binary files old/usr/share/efi/x86_64/shim-opensuse.efi and new/usr/share/efi/x86_64/shim-opensuse.efi differ
