[ubuntu/precise-proposed] grub2 1.99-21ubuntu3.6 (Accepted)

[Colin Watson]

grub2 (1.99-21ubuntu3.6) precise-proposed; urgency=low

  * Fix backport mistake in patch to install signed images if UEFI Secure
    Boot is enabled.

grub2 (1.99-21ubuntu3.5) precise-proposed; urgency=low

  * Backport several changes to support Secure Boot patches.
  * Add Secure Boot patches from Ubuntu 12.10 and Fedora (LP: #1075181):
    - Don't permit loading modules on UEFI secure boot.
    - Add efifwsetup module to reboot into firmware setup menu.
    - Add "linuxefi" loader which avoids ExitBootServices.
    - Only build linuxefi on amd64.
    - Make linuxefi refuse to boot without shim.
    - Make the linux module call linuxefi when necessary, simplifying
      configuration.
    - If secure boot is enabled and the kernel is signed, linux will call
      linuxefi to hand over to it without calling ExitBootServices.
    - Otherwise, linux will fall through to previous code, call
      ExitBootServices itself, and boot the kernel normally.
    - Change linuxefi to return GRUB_ERR_ACCESS_DENIED rather than
      GRUB_ERR_INVALID_COMMAND in the case of an invalid signature, to make
      it easier to implement different handling of unsigned kernels in
      future if necessary.
    - Generate configuration for signed UEFI kernels if available.
    - Install signed images if UEFI Secure Boot is enabled.
    - Output a menu entry for firmware setup on UEFI FastBoot systems.
    - Add some extra debugging to signed/unsigned kernel logic.
    - On amd64, build two images for signing: one with prefix /EFI/BOOT for
      use on removable media, and one with prefix /EFI/ubuntu (and with the
      lvm, mdraid09, and mdraid1x modules added) for use on fixed disks.

Date: Wed, 05 Dec 2012 16:56:50 +0000
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/grub2/1.99-21ubuntu3.6
-------------- next part --------------
Format: 1.8
Date: Wed, 05 Dec 2012 16:56:50 +0000
Source: grub2
Binary: grub2 grub-linuxbios grub-efi grub-common grub2-common grub-emu grub-pc-bin grub-pc grub-rescue-pc grub-coreboot-bin grub-coreboot grub-efi-ia32-bin grub-efi-ia32 grub-efi-amd64-bin grub-efi-amd64 grub-ieee1275-bin grub-ieee1275 grub-firmware-qemu grub-yeeloong-bin grub-yeeloong grub-mount-udeb
Architecture: source
Version: 1.99-21ubuntu3.6
Distribution: precise-proposed
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Description: 
 grub-common - GRand Unified Bootloader (common files)
 grub-coreboot - GRand Unified Bootloader, version 2 (Coreboot version)
 grub-coreboot-bin - GRand Unified Bootloader, version 2 (Coreboot binaries)
 grub-efi   - GRand Unified Bootloader, version 2 (dummy package)
 grub-efi-amd64 - GRand Unified Bootloader, version 2 (EFI-AMD64 version)
 grub-efi-amd64-bin - GRand Unified Bootloader, version 2 (EFI-AMD64 binaries)
 grub-efi-ia32 - GRand Unified Bootloader, version 2 (EFI-IA32 version)
 grub-efi-ia32-bin - GRand Unified Bootloader, version 2 (EFI-IA32 binaries)
 grub-emu   - GRand Unified Bootloader, version 2 (emulated version)
 grub-firmware-qemu - GRUB firmware image for QEMU
 grub-ieee1275 - GRand Unified Bootloader, version 2 (Open Firmware version)
 grub-ieee1275-bin - GRand Unified Bootloader, version 2 (Open Firmware binaries)
 grub-linuxbios - GRand Unified Bootloader, version 2 (dummy package)
 grub-mount-udeb - export GRUB filesystems using FUSE (udeb)
 grub-pc    - GRand Unified Bootloader, version 2 (PC/BIOS version)
 grub-pc-bin - GRand Unified Bootloader, version 2 (PC/BIOS binaries)
 grub-rescue-pc - GRUB bootable rescue images, version 2 (PC/BIOS version)
 grub-yeeloong - GRand Unified Bootloader, version 2 (Yeeloong version)
 grub-yeeloong-bin - GRand Unified Bootloader, version 2 (Yeeloong binaries)
 grub2      - GRand Unified Bootloader, version 2 (dummy package)
 grub2-common - GRand Unified Bootloader (common files for version 2)
Launchpad-Bugs-Fixed: 1075181
Changes: 
 grub2 (1.99-21ubuntu3.6) precise-proposed; urgency=low
 .
   * Fix backport mistake in patch to install signed images if UEFI Secure
     Boot is enabled.
 .
 grub2 (1.99-21ubuntu3.5) precise-proposed; urgency=low
 .
   * Backport several changes to support Secure Boot patches.
   * Add Secure Boot patches from Ubuntu 12.10 and Fedora (LP: #1075181):
     - Don't permit loading modules on UEFI secure boot.
     - Add efifwsetup module to reboot into firmware setup menu.
     - Add "linuxefi" loader which avoids ExitBootServices.
     - Only build linuxefi on amd64.
     - Make linuxefi refuse to boot without shim.
     - Make the linux module call linuxefi when necessary, simplifying
       configuration.
     - If secure boot is enabled and the kernel is signed, linux will call
       linuxefi to hand over to it without calling ExitBootServices.
     - Otherwise, linux will fall through to previous code, call
       ExitBootServices itself, and boot the kernel normally.
     - Change linuxefi to return GRUB_ERR_ACCESS_DENIED rather than
       GRUB_ERR_INVALID_COMMAND in the case of an invalid signature, to make
       it easier to implement different handling of unsigned kernels in
       future if necessary.
     - Generate configuration for signed UEFI kernels if available.
     - Install signed images if UEFI Secure Boot is enabled.
     - Output a menu entry for firmware setup on UEFI FastBoot systems.
     - Add some extra debugging to signed/unsigned kernel logic.
     - On amd64, build two images for signing: one with prefix /EFI/BOOT for
       use on removable media, and one with prefix /EFI/ubuntu (and with the
       lvm, mdraid09, and mdraid1x modules added) for use on fixed disks.
Checksums-Sha1: 
 38d8827e571f7f6eb79244d1deebf062bf76981c 3978 grub2_1.99-21ubuntu3.6.dsc
 5abed741c7aecd10468126f72b4adf536255ec94 456024 grub2_1.99-21ubuntu3.6.diff.gz
Checksums-Sha256: 
 d9fa14cfd17c8e7e6bf10d4afb89c22790f9ad7410c7eb6862b7889f498c13c7 3978 grub2_1.99-21ubuntu3.6.dsc
 175504a6f880e75e6540127f7cca695d306cb7e7e3aad4bc7ca5beac5da681c1 456024 grub2_1.99-21ubuntu3.6.diff.gz
Files: 
 e88291f936b4cabaf2b2026aff78006a 3978 admin extra grub2_1.99-21ubuntu3.6.dsc
 546da63d7a62e414310d173e5ddc1131 456024 admin extra grub2_1.99-21ubuntu3.6.diff.gz
Original-Maintainer: GRUB Maintainers <pkg-grub-devel at lists.alioth.debian.org>