[lorax-rhel7] Add SB lockdown to EFI grub menu (#1030495)

Brian C. Lane bcl at redhat.com
Fri Nov 15 21:54:45 UTC 2013


From: "Brian C. Lane" <bcl at redhat.com>

Resolves: rhbz#1030495
---
 share/config_files/x86/grub2-efi.cfg      | 3 +++
 share/efi.tmpl                            | 1 +
 share/live/config_files/x86/grub2-efi.cfg | 3 +++
 share/live/efi.tmpl                       | 2 ++
 4 files changed, 9 insertions(+)

diff --git a/share/config_files/x86/grub2-efi.cfg b/share/config_files/x86/grub2-efi.cfg
index 3301bc1..74888fc 100644
--- a/share/config_files/x86/grub2-efi.cfg
+++ b/share/config_files/x86/grub2-efi.cfg
@@ -37,4 +37,7 @@ submenu 'Troubleshooting -->' {
 		linuxefi @KERNELPATH@ @ROOT@ rescue quiet
 		initrdefi @INITRDPATH@
 	}
+	menuentry '@PRODUCT@ @VERSION@ Secure Boot Lockdown' {
+		chainloader /EFI/BOOT/lockdown.efi
+	}
 }
diff --git a/share/efi.tmpl b/share/efi.tmpl
index dee095f..4e29ec9 100644
--- a/share/efi.tmpl
+++ b/share/efi.tmpl
@@ -9,6 +9,7 @@ mkdir ${EFIBOOTDIR}
 mkdir ${EFIBOOTDIR}/fonts/
 install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi
 install boot/efi/EFI/*/MokManager.efi ${EFIBOOTDIR}/
+install usr/share/shim/lockdown.efi ${EFIBOOTDIR}/
 install boot/efi/EFI/*/gcdx64.efi ${EFIBOOTDIR}/grubx64.efi
 install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/
 
diff --git a/share/live/config_files/x86/grub2-efi.cfg b/share/live/config_files/x86/grub2-efi.cfg
index f99f459..aa003bd 100644
--- a/share/live/config_files/x86/grub2-efi.cfg
+++ b/share/live/config_files/x86/grub2-efi.cfg
@@ -37,4 +37,7 @@ submenu 'Troubleshooting -->' {
 		linuxefi @KERNELPATH@ @ROOT@ rd.live.image rescue quiet
 		initrdefi @INITRDPATH@
 	}
+	menuentry '@PRODUCT@ @VERSION@ Secure Boot Lockdown' {
+		chainloader /EFI/BOOT/lockdown.efi
+	}
 }
diff --git a/share/live/efi.tmpl b/share/live/efi.tmpl
index cc1c2ec..f6cf173 100644
--- a/share/live/efi.tmpl
+++ b/share/live/efi.tmpl
@@ -8,6 +8,8 @@ APPLE_EFI_DISKNAME=inroot+"/usr/share/pixmaps/bootloader/fedora-media.vol"
 mkdir ${EFIBOOTDIR}
 mkdir ${EFIBOOTDIR}/fonts/
 install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi
+install boot/efi/EFI/*/MokManager.efi ${EFIBOOTDIR}/
+install boot/efi/EFI/*/lockdown.efi ${EFIBOOTDIR}/
 install boot/efi/EFI/*/gcdx64.efi ${EFIBOOTDIR}/grubx64.efi
 install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/
 
-- 
1.8.3.1



More information about the anaconda-patches mailing list