[SRU][B/linux-signed-hwe][PATCH] UBUNTU: fix vmlinuz-* permissions for opal signed kernels

Kleber Sacilotto de Souza kleber.souza at canonical.com
Thu Nov 28 14:27:42 UTC 2019


From: Seth Forshee <seth.forshee at canonical.com>

BugLink: https://bugs.launchpad.net/bugs/1843327

We're currently changing the permissions on the signature file
instead of the concatenated kernel+signature file which will be
installed. Fix this.

Signed-off-by: Seth Forshee <seth.forshee at canonical.com>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo at canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza at canonical.com>
---

Notes:
    This bug was already fixed for Bionic and Disco, however this wasn't
    fixed for bionic/linux-signed-hwe.

 debian/rules | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/debian/rules b/debian/rules
index d8d99f8..bd5b948 100755
--- a/debian/rules
+++ b/debian/rules
@@ -59,10 +59,10 @@ override_dh_auto_build:
 		done;								\
 		for s in *.opal.sig; do						\
 			[ ! -f "$$s" ] && continue;				\
-			chmod 600 "$$s";					\
 			base=$$(echo "$$s" | sed -e 's/.opal.sig//');		\
-			cat "$$base.opal" "$$s" >"../SIGNED/$$base";\
-		done								\
+			cat "$$base.opal" "$$s" >"../SIGNED/$$base";		\
+			chmod 600 "../SIGNED/$$base";				\
+		done;								\
 	)
 
 override_dh_auto_install:
-- 
2.20.1




More information about the kernel-team mailing list