rhboot / rhboot/shim

With the latest SHIM are there any changes to GRUB/Loaded items needed?

Open
#593 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
1.1k
Forks
348
PR merge metrics
No merged PRs in 30d

Description

The last time I updated it was due to the GRUB bug that required everyone to update.

Does this update and NX requirement extend to needing to update/change GRUB (or any loaded .EFI) again?

Should we be increasing the sbat version of GRUB (loaded .EFI binaries) when we update shim or only if needing to upgrade GRUB (other .EFI binary) as well?

Should we use a new private/public certificate for GRUB (or other loaded .EFI binaries)?

Thanks.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file, test, or entry point is named. Research the shim update guidance for GRUB and loaded .EFI binaries, including SBAT versioning, the NX requirement, and certificate changes; done means providing a clear, documented answer to each question.

Written by the indexing model from the issue text.

Assessment

Domain
operating-systems, security
Issue type
Documentation
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.