[ubuntu/precise-proposed] grub2 1.99-21ubuntu3.7 (Accepted)

[Colin Watson]

grub2 (1.99-21ubuntu3.7) precise-proposed; urgency=low

  * Fix backport mistake that caused grub.cfg not to be created in $efidir
    if UEFI Secure Boot is enabled.
  * When installing to removable media with UEFI Secure Boot, install
    gcdx64.efi.signed rather than grubx64.efi.signed.
  * Make gcdx64.efi.signed fall back to sourcing $prefix/grub.cfg if
    $prefix/x86_64-efi/grub.cfg is missing, as is likely when using
    'grub-install --removable'.

grub2 (1.99-21ubuntu3.6) precise-proposed; urgency=low

  * Fix backport mistake in patch to install signed images if UEFI Secure
    Boot is enabled.

grub2 (1.99-21ubuntu3.5) precise-proposed; urgency=low

  * Backport several changes to support Secure Boot patches.
  * Add Secure Boot patches from Ubuntu 12.10 and Fedora (LP: #1075181):
    - Don't permit loading modules on UEFI secure boot.
    - Add efifwsetup module to reboot into firmware setup menu.
    - Add "linuxefi" loader which avoids ExitBootServices.
    - Only build linuxefi on amd64.
    - Make linuxefi refuse to boot without shim.
    - Make the linux module call linuxefi when necessary, simplifying
      configuration.
    - If secure boot is enabled and the kernel is signed, linux will call
      linuxefi to hand over to it without calling ExitBootServices.
    - Otherwise, linux will fall through to previous code, call
      ExitBootServices itself, and boot the kernel normally.
    - Change linuxefi to return GRUB_ERR_ACCESS_DENIED rather than
      GRUB_ERR_INVALID_COMMAND in the case of an invalid signature, to make
      it easier to implement different handling of unsigned kernels in
      future if necessary.
    - Generate configuration for signed UEFI kernels if available.
    - Install signed images if UEFI Secure Boot is enabled.
    - Output a menu entry for firmware setup on UEFI FastBoot systems.
    - Add some extra debugging to signed/unsigned kernel logic.
    - On amd64, build two images for signing: one with prefix /EFI/BOOT for
      use on removable media, and one with prefix /EFI/ubuntu (and with the
      lvm, mdraid09, and mdraid1x modules added) for use on fixed disks.

Date: Mon, 10 Dec 2012 11:31:09 +0000
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/grub2/1.99-21ubuntu3.7
-------------- next part --------------
Format: 1.8
Date: Mon, 10 Dec 2012 11:31:09 +0000
Source: grub2
Binary: grub2 grub-linuxbios grub-efi grub-common grub2-common grub-emu grub-pc-bin grub-pc grub-rescue-pc grub-coreboot-bin grub-coreboot grub-efi-ia32-bin grub-efi-ia32 grub-efi-amd64-bin grub-efi-amd64 grub-ieee1275-bin grub-ieee1275 grub-firmware-qemu grub-yeeloong-bin grub-yeeloong grub-mount-udeb
Architecture: source
Version: 1.99-21ubuntu3.7
Distribution: precise-proposed
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Description: 
 grub-common - GRand Unified Bootloader (common files)
 grub-coreboot - GRand Unified Bootloader, version 2 (Coreboot version)
 grub-coreboot-bin - GRand Unified Bootloader, version 2 (Coreboot binaries)
 grub-efi   - GRand Unified Bootloader, version 2 (dummy package)
 grub-efi-amd64 - GRand Unified Bootloader, version 2 (EFI-AMD64 version)
 grub-efi-amd64-bin - GRand Unified Bootloader, version 2 (EFI-AMD64 binaries)
 grub-efi-ia32 - GRand Unified Bootloader, version 2 (EFI-IA32 version)
 grub-efi-ia32-bin - GRand Unified Bootloader, version 2 (EFI-IA32 binaries)
 grub-emu   - GRand Unified Bootloader, version 2 (emulated version)
 grub-firmware-qemu - GRUB firmware image for QEMU
 grub-ieee1275 - GRand Unified Bootloader, version 2 (Open Firmware version)
 grub-ieee1275-bin - GRand Unified Bootloader, version 2 (Open Firmware binaries)
 grub-linuxbios - GRand Unified Bootloader, version 2 (dummy package)
 grub-mount-udeb - export GRUB filesystems using FUSE (udeb)
 grub-pc    - GRand Unified Bootloader, version 2 (PC/BIOS version)
 grub-pc-bin - GRand Unified Bootloader, version 2 (PC/BIOS binaries)
 grub-rescue-pc - GRUB bootable rescue images, version 2 (PC/BIOS version)
 grub-yeeloong - GRand Unified Bootloader, version 2 (Yeeloong version)
 grub-yeeloong-bin - GRand Unified Bootloader, version 2 (Yeeloong binaries)
 grub2      - GRand Unified Bootloader, version 2 (dummy package)
 grub2-common - GRand Unified Bootloader (common files for version 2)
Launchpad-Bugs-Fixed: 1075181
Changes: 
 grub2 (1.99-21ubuntu3.7) precise-proposed; urgency=low
 .
   * Fix backport mistake that caused grub.cfg not to be created in $efidir
     if UEFI Secure Boot is enabled.
   * When installing to removable media with UEFI Secure Boot, install
     gcdx64.efi.signed rather than grubx64.efi.signed.
   * Make gcdx64.efi.signed fall back to sourcing $prefix/grub.cfg if
     $prefix/x86_64-efi/grub.cfg is missing, as is likely when using
     'grub-install --removable'.
 .
 grub2 (1.99-21ubuntu3.6) precise-proposed; urgency=low
 .
   * Fix backport mistake in patch to install signed images if UEFI Secure
     Boot is enabled.
 .
 grub2 (1.99-21ubuntu3.5) precise-proposed; urgency=low
 .
   * Backport several changes to support Secure Boot patches.
   * Add Secure Boot patches from Ubuntu 12.10 and Fedora (LP: #1075181):
     - Don't permit loading modules on UEFI secure boot.
     - Add efifwsetup module to reboot into firmware setup menu.
     - Add "linuxefi" loader which avoids ExitBootServices.
     - Only build linuxefi on amd64.
     - Make linuxefi refuse to boot without shim.
     - Make the linux module call linuxefi when necessary, simplifying
       configuration.
     - If secure boot is enabled and the kernel is signed, linux will call
       linuxefi to hand over to it without calling ExitBootServices.
     - Otherwise, linux will fall through to previous code, call
       ExitBootServices itself, and boot the kernel normally.
     - Change linuxefi to return GRUB_ERR_ACCESS_DENIED rather than
       GRUB_ERR_INVALID_COMMAND in the case of an invalid signature, to make
       it easier to implement different handling of unsigned kernels in
       future if necessary.
     - Generate configuration for signed UEFI kernels if available.
     - Install signed images if UEFI Secure Boot is enabled.
     - Output a menu entry for firmware setup on UEFI FastBoot systems.
     - Add some extra debugging to signed/unsigned kernel logic.
     - On amd64, build two images for signing: one with prefix /EFI/BOOT for
       use on removable media, and one with prefix /EFI/ubuntu (and with the
       lvm, mdraid09, and mdraid1x modules added) for use on fixed disks.
Checksums-Sha1: 
 80a430339739ba97873cd4ad4b97ac6486c796dd 3978 grub2_1.99-21ubuntu3.7.dsc
 759d27768bf1efe805049d920122feb2eb370a78 456930 grub2_1.99-21ubuntu3.7.diff.gz
Checksums-Sha256: 
 0d2426c0fe3bb35ee9aa1bed28fd0af9cbd843951596e11ee29b515f47a723d9 3978 grub2_1.99-21ubuntu3.7.dsc
 565c0c3fbd7ccf3aa6277cfc6618c8f43040b79592c7e1e4c6e978fd5865aa35 456930 grub2_1.99-21ubuntu3.7.diff.gz
Files: 
 5bbdd62f60c142fa089c57e0a14e94aa 3978 admin extra grub2_1.99-21ubuntu3.7.dsc
 64975c8098d186836aca1a8e72e13738 456930 admin extra grub2_1.99-21ubuntu3.7.diff.gz
Original-Maintainer: GRUB Maintainers <pkg-grub-devel at lists.alioth.debian.org>