From: Jan Stancek jstancek@redhat.com
redhat: Use redhatsecureboot701 for ppc64le
Forward-port of c9s commit dd9a91221db9 ("redhat: Use redhatsecureboot701 for ppc64le")
Conflicts: RHEL has certs stored in system-sb-certs package, but ARK/Fedora has them in tree.
When addressing CVE-2022-1665 the ppc64le signing keys were rotated but the kernel itself was not updated to use the new key.
Signed-off-by: Patrick Talbert ptalbert@redhat.com Signed-off-by: Prarit Bhargava prarit@redhat.com Signed-off-by: Jan Stancek jstancek@redhat.com
diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template index blahblah..blahblah 100644 --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -843,7 +843,7 @@ Source13: redhatsecureboot501.cer %define pesign_name_0 redhatsecureboot302 %endif %ifarch ppc64le -%define pesign_name_0 redhatsecureboot601 +%define pesign_name_0 redhatsecureboot701 %endif %endif # rhel && !eln
-- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2849