Bug#820129: This is not a bug, but a feature

2017-01-31 Thread Linn Crosetto
On Thu, Dec 08, 2016 at 04:44:18PM +0100, Andreas Heinlein wrote: > I do not think this should be done, it would make it difficult if not > impossible to boot custom kernels. For your own use, you could always > build your own signed kernel and add the signing key to the UEFI > firmware, or turn

Bug#838714: [git-buildpackage/master] dch: avoid adding section in snapshot mode if distribution is UNRELEASED

2016-10-07 Thread Linn Crosetto
tag 838714 pending thanks Date: Wed Sep 21 15:59:00 2016 -0600 Author: Linn Crosetto <l...@hpe.com> Commit ID: c1b32fa62ee252e4cffb92a64b162ad8f98ca27a Commit URL: https://git.sigxcpu.org/cgit/git-buildpackage/;a=commitdiff;h=c1b32fa62ee252e4cffb92a64b162ad8f98ca27a Patch URL:

Bug#838714: dch: avoid adding section in snapshot mode if distribution is UNRELEASED

2016-09-26 Thread Linn Crosetto
to a new branch 'bar' .Switched to a new branch 'bar' ... [...] -- Linn From d5870bc950fc88cd120f832c93477ed560577be6 Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Wed, 21 Sep 2016 15:59:00 -0600 Subject: [PATCH v2] dch: avoid adding section in snapshot mode if distribution is

Bug#838714: dch: avoid adding section in snapshot mode if distribution is UNRELEASED

2016-09-23 Thread Linn Crosetto
-maintainer upload. + * UNRELEASED - -- Linn Crosetto <l...@hpe.com> Fri, 23 Sep 2016 18:51:37 + + -- Linn Crosetto <l...@hpe.com> Fri, 23 Sep 2016 14:46:07 -0600 git-buildpackage (0.8.3) unstable; urgency=medium Then after gbp dch --release: -git-buildpackage (0.8.3+nmu1) UNRELEA

Bug#838322: efi-readvar: add support for MokListRT, MokListXRT

2016-09-19 Thread Linn Crosetto
. I have attached a patch to add support for these variables to efi-readvar and to remove MokList since it is not accessible. Thanks. >From dfcf6d3bc4c98c624cbc0f724afca8bc97117a49 Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Mon, 12 Sep 2016 15:43:34 -0600 Subjec

Bug#769172: Updated patches

2016-09-02 Thread Linn Crosetto
Attaching updated patches (also included in #836140). From f270003bb7a4fab42884b4f373644cebdb51769e Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hp.com> Date: Mon, 17 Nov 2014 11:55:40 -0700 Subject: [PATCH 1/2] Build UEFI images using prefix from lsb_release Change prefix in bui

Bug#836140: grub2: support for shim and Secure Boot on arm64

2016-08-30 Thread Linn Crosetto
Source: grub2 Version: 2.02~beta2-37 Severity: wishlist Tags: patch -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 The attached patch sets add support for shim and Secure Boot on arm64. The first set adds support to GRUB and many of the patches have been pulled from upstream, with the Origin

Bug#831827: linux: arm64 support for securelevel and Secure Boot

2016-08-30 Thread Linn Crosetto
On Mon, Aug 29, 2016 at 01:30:44PM -0700, Linn Crosetto wrote: > On Sat, Aug 27, 2016 at 10:22:52PM +0100, Ben Hutchings wrote: > > Control: tag -1 pending > > > > Applied, but: > > > > > > > > --- a/drivers/firmware/efi/libstub/fdt.c &

Bug#831827: linux: arm64 support for securelevel and Secure Boot

2016-08-29 Thread Linn Crosetto
On Sat, Aug 27, 2016 at 10:22:52PM +0100, Ben Hutchings wrote: > Control: tag -1 pending > > Applied, but: > > > > > --- a/drivers/firmware/efi/libstub/fdt.c > > +++ b/drivers/firmware/efi/libstub/fdt.c > > @@ -139,6 +139,13 @@ efi_status_t update_fdt(efi_system_table_t > > *sys_table, void

Bug#831827: linux: arm64 support for securelevel and Secure Boot

2016-07-19 Thread Linn Crosetto
:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Mon, 22 Feb 2016 12:54:37 -0700 Subject: [PATCH 1/2] arm64/efi: Disable secure boot if shim is in insecure mode Port to arm64 a patch originally written by Josh Boyer for the x86 EFI stub. A user can manually tell the shim boot loader t

Bug#830488: edk2: increase variable sizes in qemu-efi for Secure Boot certs

2016-07-08 Thread Linn Crosetto
Package: edk2 Version: 0~20160408.ffea0a2c-2 Severity: normal Tags: patch To support UEFI Secure Boot and the Linux persistent store with UEFI variables, set PcdMaxVariableSize to 0x2000 bytes as is done in OvmfPkg. Also increase the maximum size for Authenticated variables in order to handle a

Bug#823003: makedumpfile: kdump support for UEFI Secure Boot

2016-04-29 Thread Linn Crosetto
/i3T2huoX85pKl5iVptpwSMx1qnR0KUtTyiSU9q609 t/krosiT/MQZ6+9zNpYn =4XBN -END PGP SIGNATURE- >From 8457b1664a1fbb287dbc3eed26fa204c647acf32 Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Fri, 29 Apr 2016 14:26:11 -0600 Subject: [PATCH] kdump-tools: add support for UE

Bug#820129: grub2: Disallow booting unsigned kernels when Secure Boot is enabled

2016-04-05 Thread Linn Crosetto
/RahZdgLhwl42doC7LgjpYI wN0JD88AfHJAuUtwbpxc =fkO9 -END PGP SIGNATURE- >From 52de74c85ef6a9aca426d9de8f188fe92241aff6 Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Tue, 5 Apr 2016 11:49:05 -0600 Subject: [PATCH] Disallow unsigned kernels if UEFI Secure Boot is enabled

Bug#819757: Patch to enable UEFI Secure Boot in qemu-efi

2016-04-01 Thread Linn Crosetto
Attaching a patch without the changelog entry. From 99d3ceb650d4a05fdc26987e3dd436dccf3206bb Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Fri, 1 Apr 2016 10:44:15 -0600 Subject: [PATCH] Add support for UEFI Secure Boot to qemu-efi Add SECURE_BOOT_ENABLE flag to aarch64

Bug#819757: edk2: Add support for UEFI Secure Boot to qemu-efi

2016-04-01 Thread Linn Crosetto
00:00:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Fri, 1 Apr 2016 10:44:15 -0600 Subject: [PATCH] Add support for UEFI Secure Boot to qemu-efi Add SECURE_BOOT_ENABLE flag to aarch64 build to enable support for UEFI Secure Boot. Signed-off-by: Linn Crosetto <l...@hpe.com> --- d

Bug#806178: grub2: install arm64 signed images if UEFI Secure Boot is enabled

2015-11-24 Thread Linn Crosetto
+kHkXV4EJNV3YPUxE40nlyXKnAAYPgSqYD6z6mFjWKE+fgerZ/7vwP04v1E+ I/llAGLPGHxEnYNgSL5R+T4dN9VONAMeL1EWU+1unFc8T2DGR5xCeBHZP6LmK99/ FkcfixImAJqZakuC+ZHh =bYSe -END PGP SIGNATURE- >From ddc31ebd53a5fdf8682d3618c3660eb2fd7231ca Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Th

Bug#798607: Patch to debian/clean

2015-09-11 Thread Linn Crosetto
Here is a patch to debian/clean. I avoided wildcards for some files to be consistent with autogen.sh. -- Linn Crosetto Linux for HP Helion OpenStack From 14999e018b9f18187177b7ad75e6df6e0935ed0c Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hpe.com> Date: Fri, 11 Sep 2015 12:12:16

Bug#798607: grub2: docs, mpi, and other cleanup

2015-09-10 Thread Linn Crosetto
status 2 >From 7e71ef3ee91b17fc1be084608bb569d466a74819 Mon Sep 17 00:00:00 2001 From: Linn Crosetto <l...@hp.com> Date: Fri, 4 Sep 2015 12:57:39 -0600 Subject: [PATCH] override_dh_clean cleanup Remove files and soft links created during the build. The cleanup used to be part of Makefile.in

Bug#777965: Patch for libpam-chroot FTBFS with GCC-5

2015-07-09 Thread Linn Crosetto
tags 777965 + patch thanks Here is a patch to mark the non-standard function identifier __FUNCTION__ with the __extension__ keyword to work around the build failure with GCC-5. -- Linn Crosetto Linux for HP Helion diff -urN b/pam_chroot.c c/pam_chroot.c --- b/pam_chroot.c 2015-07-09 18:32

Bug#777973: libsemanage: ftbfs with GCC-5

2015-07-09 Thread Linn Crosetto
is now closed. It builds correctly with GCC 5 and ustr version 1.0.4-5. -- Linn Crosetto Linux for HP Helion -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#777961: Patch for libomxil-bellagio FTBFS with GCC-5

2015-07-08 Thread Linn Crosetto
tags 777961 + patch thanks Here is a patch to fix the logical-not-parentheses warning. -- Linn Crosetto Linux for HP Helion Description: Fix FTBFS for GCC-5 With -Werror=logical-not-parentheses enabled, a line such as the following causes the build to fail

Bug#777964: Patch to fix FTBFS for GCC-5

2015-07-08 Thread Linn Crosetto
tags 777964 + patch thanks Here is a patch to work around some unused variable warnings which cause a build failure with GCC 5. -- Linn Crosetto Linux for HP Helion Description: Suppress unused variable warnings in ptype.h Fix FTBFS for GCC-5 by suppressing erroneous unused variable warnings

Bug#777958: Patch for libmoe FTBFS for libmoe with GCC-5

2015-07-07 Thread Linn Crosetto
tags 777958 + patch thanks libmoe was written to use GNU89 inline semantics for a few inline functions declared in mb.h. Here is a patch to make them compatible with GCC 5. -- Linn Crosetto Linux for HP Helion diff -urN b/iso2mb.c c/iso2mb.c --- b/iso2mb.c 2015-07-06 21:38:49.129658661 +

Bug#777934: gnat depends on gnat-4.9

2015-07-06 Thread Linn Crosetto
Package gnat-5 is required to test with GCC 5, but the build-dep 'gnat' still depends on gnat-4.9 in experimental. -- Linn Crosetto Linux for HP Helion -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas

Bug#777938: Patch to workaround GCC 5 build failure

2015-07-02 Thread Linn Crosetto
tags 777938 + patch thanks Here is a patch to force -std=gnu89 for libuna/ as a workaround for the build failure on GCC 5 until it is fixed upstream. -- Linn Crosetto Linux for HP Helion Description: Change libuna to use GNU89 inline semantics for GCC 5 libuna as written relies on the GNU89

Bug#769172: grub2: build-efi-images calls grub-mkimage with ubuntu prefix

2014-11-12 Thread Linn Crosetto
On Wed, Nov 12, 2014 at 01:43:42AM +, Colin Watson wrote: Right now this script is only used when building for Ubuntu, so no, I won't apply this patch directly. When Debian sets up a Secure Boot signing key infrastructure (hopefully soon), it will then make sense to parameterise this.

Bug#769172: grub2: build-efi-images calls grub-mkimage with ubuntu prefix

2014-11-11 Thread Linn Crosetto
Package: grub2 Version: 2.02~beta2-16 Severity: normal Tags: patch debian/build-efi-images should use /EFI/debian instead of /EFI/ubuntu for the prefix: @@ -137,7 +137,7 @@ NET_MODULES=$CD_MODULES -p /boot/grub \ $CD_MODULES $grub_mkimage -O $platform -o