[lorax-rhel7] Add SB lockdown to EFI grub menu (#1030495)
Brian C. Lane
bcl at redhat.com
Fri Nov 15 21:54:45 UTC 2013
From: "Brian C. Lane" <bcl at redhat.com>
Resolves: rhbz#1030495
---
share/config_files/x86/grub2-efi.cfg | 3 +++
share/efi.tmpl | 1 +
share/live/config_files/x86/grub2-efi.cfg | 3 +++
share/live/efi.tmpl | 2 ++
4 files changed, 9 insertions(+)
diff --git a/share/config_files/x86/grub2-efi.cfg b/share/config_files/x86/grub2-efi.cfg
index 3301bc1..74888fc 100644
--- a/share/config_files/x86/grub2-efi.cfg
+++ b/share/config_files/x86/grub2-efi.cfg
@@ -37,4 +37,7 @@ submenu 'Troubleshooting -->' {
linuxefi @KERNELPATH@ @ROOT@ rescue quiet
initrdefi @INITRDPATH@
}
+ menuentry '@PRODUCT@ @VERSION@ Secure Boot Lockdown' {
+ chainloader /EFI/BOOT/lockdown.efi
+ }
}
diff --git a/share/efi.tmpl b/share/efi.tmpl
index dee095f..4e29ec9 100644
--- a/share/efi.tmpl
+++ b/share/efi.tmpl
@@ -9,6 +9,7 @@ mkdir ${EFIBOOTDIR}
mkdir ${EFIBOOTDIR}/fonts/
install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi
install boot/efi/EFI/*/MokManager.efi ${EFIBOOTDIR}/
+install usr/share/shim/lockdown.efi ${EFIBOOTDIR}/
install boot/efi/EFI/*/gcdx64.efi ${EFIBOOTDIR}/grubx64.efi
install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/
diff --git a/share/live/config_files/x86/grub2-efi.cfg b/share/live/config_files/x86/grub2-efi.cfg
index f99f459..aa003bd 100644
--- a/share/live/config_files/x86/grub2-efi.cfg
+++ b/share/live/config_files/x86/grub2-efi.cfg
@@ -37,4 +37,7 @@ submenu 'Troubleshooting -->' {
linuxefi @KERNELPATH@ @ROOT@ rd.live.image rescue quiet
initrdefi @INITRDPATH@
}
+ menuentry '@PRODUCT@ @VERSION@ Secure Boot Lockdown' {
+ chainloader /EFI/BOOT/lockdown.efi
+ }
}
diff --git a/share/live/efi.tmpl b/share/live/efi.tmpl
index cc1c2ec..f6cf173 100644
--- a/share/live/efi.tmpl
+++ b/share/live/efi.tmpl
@@ -8,6 +8,8 @@ APPLE_EFI_DISKNAME=inroot+"/usr/share/pixmaps/bootloader/fedora-media.vol"
mkdir ${EFIBOOTDIR}
mkdir ${EFIBOOTDIR}/fonts/
install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi
+install boot/efi/EFI/*/MokManager.efi ${EFIBOOTDIR}/
+install boot/efi/EFI/*/lockdown.efi ${EFIBOOTDIR}/
install boot/efi/EFI/*/gcdx64.efi ${EFIBOOTDIR}/grubx64.efi
install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/
--
1.8.3.1
More information about the anaconda-patches
mailing list