Ubuntu 12.10, updated several times, getting kernels ...17, ...26, and ...27.  
The symlinks in / were examined with "ls -l" and  the output  indicated that 
the link was to the /boot/vmlinuz....-generic file, NOT the 
/boot/vmlinuz...-generic.efi.signed file.
Applying the sbattach command to the /vmlinuz (and to the actual 
/boot/vmlinuz-3.5.0-27-generic file) produced a zero length output with the 
warnings:
warning: file-aligned section of .text extends beyond  end of the file
warning: checksum areas are greater than image size. invalid section table?

Applying the sbattach command to the /boot/vmlinuz...-generic.efi.signed file 
produced no errors, and output of length 1911.
I conclude that the kernels in /boot ending in ".efi.signed" are the signed 
versions, and the ones ending in ".generic" are not -- with the symlinks in "/" 
pointing to the unsigned versions.

The file /etc/kernel-img.conf contains symlinks=yes, and bootloader=no

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1170150

Title:
  vmlinuz/initrd.img symlinks do not point to signed versions on kernel
  updates of secure boot UEFI machines

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1170150/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to