[ubuntu/precise-proposed] grub2 1.99-21ubuntu3.5 (Accepted)

[Colin Watson]

grub2 (1.99-21ubuntu3.5) precise-proposed; urgency=low

  * Backport several changes to support Secure Boot patches.
  * Add Secure Boot patches from Ubuntu 12.10 and Fedora (LP: #1075181):
    - Don't permit loading modules on UEFI secure boot.
    - Add efifwsetup module to reboot into firmware setup menu.
    - Add "linuxefi" loader which avoids ExitBootServices.
    - Only build linuxefi on amd64.
    - Make linuxefi refuse to boot without shim.
    - Make the linux module call linuxefi when necessary, simplifying
      configuration.
    - If secure boot is enabled and the kernel is signed, linux will call
      linuxefi to hand over to it without calling ExitBootServices.
    - Otherwise, linux will fall through to previous code, call
      ExitBootServices itself, and boot the kernel normally.
    - Change linuxefi to return GRUB_ERR_ACCESS_DENIED rather than
      GRUB_ERR_INVALID_COMMAND in the case of an invalid signature, to make
      it easier to implement different handling of unsigned kernels in
      future if necessary.
    - Generate configuration for signed UEFI kernels if available.
    - Install signed images if UEFI Secure Boot is enabled.
    - Output a menu entry for firmware setup on UEFI FastBoot systems.
    - Add some extra debugging to signed/unsigned kernel logic.
    - On amd64, build two images for signing: one with prefix /EFI/BOOT for
      use on removable media, and one with prefix /EFI/ubuntu (and with the
      lvm, mdraid09, and mdraid1x modules added) for use on fixed disks.

Date: Wed, 07 Nov 2012 10:01:33 +0000
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/grub2/1.99-21ubuntu3.5
-------------- next part --------------
Format: 1.8
Date: Wed, 07 Nov 2012 10:01:33 +0000
Source: grub2
Binary: grub2 grub-linuxbios grub-efi grub-common grub2-common grub-emu grub-pc-bin grub-pc grub-rescue-pc grub-coreboot-bin grub-coreboot grub-efi-ia32-bin grub-efi-ia32 grub-efi-amd64-bin grub-efi-amd64 grub-ieee1275-bin grub-ieee1275 grub-firmware-qemu grub-yeeloong-bin grub-yeeloong grub-mount-udeb
Architecture: source
Version: 1.99-21ubuntu3.5
Distribution: precise-proposed
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Description: 
 grub-common - GRand Unified Bootloader (common files)
 grub-coreboot - GRand Unified Bootloader, version 2 (Coreboot version)
 grub-coreboot-bin - GRand Unified Bootloader, version 2 (Coreboot binaries)
 grub-efi   - GRand Unified Bootloader, version 2 (dummy package)
 grub-efi-amd64 - GRand Unified Bootloader, version 2 (EFI-AMD64 version)
 grub-efi-amd64-bin - GRand Unified Bootloader, version 2 (EFI-AMD64 binaries)
 grub-efi-ia32 - GRand Unified Bootloader, version 2 (EFI-IA32 version)
 grub-efi-ia32-bin - GRand Unified Bootloader, version 2 (EFI-IA32 binaries)
 grub-emu   - GRand Unified Bootloader, version 2 (emulated version)
 grub-firmware-qemu - GRUB firmware image for QEMU
 grub-ieee1275 - GRand Unified Bootloader, version 2 (Open Firmware version)
 grub-ieee1275-bin - GRand Unified Bootloader, version 2 (Open Firmware binaries)
 grub-linuxbios - GRand Unified Bootloader, version 2 (dummy package)
 grub-mount-udeb - export GRUB filesystems using FUSE (udeb)
 grub-pc    - GRand Unified Bootloader, version 2 (PC/BIOS version)
 grub-pc-bin - GRand Unified Bootloader, version 2 (PC/BIOS binaries)
 grub-rescue-pc - GRUB bootable rescue images, version 2 (PC/BIOS version)
 grub-yeeloong - GRand Unified Bootloader, version 2 (Yeeloong version)
 grub-yeeloong-bin - GRand Unified Bootloader, version 2 (Yeeloong binaries)
 grub2      - GRand Unified Bootloader, version 2 (dummy package)
 grub2-common - GRand Unified Bootloader (common files for version 2)
Launchpad-Bugs-Fixed: 1075181
Changes: 
 grub2 (1.99-21ubuntu3.5) precise-proposed; urgency=low
 .
   * Backport several changes to support Secure Boot patches.
   * Add Secure Boot patches from Ubuntu 12.10 and Fedora (LP: #1075181):
     - Don't permit loading modules on UEFI secure boot.
     - Add efifwsetup module to reboot into firmware setup menu.
     - Add "linuxefi" loader which avoids ExitBootServices.
     - Only build linuxefi on amd64.
     - Make linuxefi refuse to boot without shim.
     - Make the linux module call linuxefi when necessary, simplifying
       configuration.
     - If secure boot is enabled and the kernel is signed, linux will call
       linuxefi to hand over to it without calling ExitBootServices.
     - Otherwise, linux will fall through to previous code, call
       ExitBootServices itself, and boot the kernel normally.
     - Change linuxefi to return GRUB_ERR_ACCESS_DENIED rather than
       GRUB_ERR_INVALID_COMMAND in the case of an invalid signature, to make
       it easier to implement different handling of unsigned kernels in
       future if necessary.
     - Generate configuration for signed UEFI kernels if available.
     - Install signed images if UEFI Secure Boot is enabled.
     - Output a menu entry for firmware setup on UEFI FastBoot systems.
     - Add some extra debugging to signed/unsigned kernel logic.
     - On amd64, build two images for signing: one with prefix /EFI/BOOT for
       use on removable media, and one with prefix /EFI/ubuntu (and with the
       lvm, mdraid09, and mdraid1x modules added) for use on fixed disks.
Checksums-Sha1: 
 452da06b39114eac00ea67d1bd933ea8ca054d5a 3978 grub2_1.99-21ubuntu3.5.dsc
 f47591d62bc335e63f91d96fcffa3bf3d2ffc49e 455982 grub2_1.99-21ubuntu3.5.diff.gz
Checksums-Sha256: 
 18e09f9e136c3f821826bbe2f20a4c674e45e0b6b8aa6aa40aae378206b73478 3978 grub2_1.99-21ubuntu3.5.dsc
 e43570551312b3b4f45876224edb68bc54b243b5a5432fdb223536bc8df3fd40 455982 grub2_1.99-21ubuntu3.5.diff.gz
Files: 
 135174448896dfda62ad92749ff1d0d9 3978 admin extra grub2_1.99-21ubuntu3.5.dsc
 0c295fbf4fa0cb9f257e2df9449c0028 455982 admin extra grub2_1.99-21ubuntu3.5.diff.gz
Original-Maintainer: GRUB Maintainers <pkg-grub-devel at lists.alioth.debian.org>