mbox series

[linux-meta,K,L,0/2] Check if EFI signatures are revoked at build time

Message ID 20221121150324.1304110-1-dimitri.ledkov@canonical.com
Headers show
Series Check if EFI signatures are revoked at build time | expand

Message

Dimitri John Ledkov Nov. 21, 2022, 3:03 p.m. UTC 
BugLink: https://bugs.launchpad.net/bugs/1996955

If built-in revocation certificates information is known, verify if
freshly signed EFI binaries are revoked. This prevents accidentally
publishing signed kernel packages that fail to kexec/kdump under
secureboot.

Will be active only if both https://bugs.launchpad.net/bugs/1996892
and this patches land in a given kernel.

Dimitri John Ledkov (2):
  UBUNTU: [Packaging] Check if EFI signatures are revoked at build time
  UBUNTU: [Packaging] Add EFI signed flavours buildinfo build-depends

 debian/control.stub |  2 ++
 debian/rules        | 15 +++++++++++++++
 2 files changed, 17 insertions(+)