Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package shim for openSUSE:Factory checked in
at 2022-09-17 20:10:05
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/shim (Old)
and /work/SRC/openSUSE:Factory/.shim.new.2083 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "shim"
Sat Sep 17 20:10:05 2022 rev:104 rq:1004027 version:15.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/shim/shim.changes 2022-08-05
19:50:56.657446872 +0200
+++ /work/SRC/openSUSE:Factory/.shim.new.2083/shim.changes 2022-09-17
20:10:06.861117813 +0200
@@ -1,0 +2,6 @@
+Mon Sep 12 12:30:54 UTC 2022 - Kilian Hanich <khanich.opensou...@gmx.de>
+
+- Add logic to shim.spec to only set sbat policy when efivarfs is writeable.
+ (bsc#1201066)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ shim.spec ++++++
--- /var/tmp/diff_new_pack.OqeMTj/_old 2022-09-17 20:10:07.573119867 +0200
+++ /var/tmp/diff_new_pack.OqeMTj/_new 2022-09-17 20:10:07.577119878 +0200
@@ -306,9 +306,13 @@
return $rc
}
# run mokutil for setting sbat policy to latest mode
-SBAT_POLICY=/sys/firmware/efi/efivars/SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23
+EFIVARFS=/sys/firmware/efi/efivars
+SBAT_POLICY="$EFIVARFS/SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23"
if is_efi; then
- if [ ! -f "$SBAT_POLICY" ] && mokutil -h | grep -q "set-sbat-policy";
then
+ if [ -w $EFIVARFS ] && \
+ [ ! -f "$SBAT_POLICY" ] && \
+ mokutil -h | grep -q "set-sbat-policy"; \
+ then
# Only apply CA check on the kernel package certs (bsc#1173115)
mokutil --set-sbat-policy latest
fi
