Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

mokutil-0.7.0-1.2 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: mokutil Distribution: openSUSE Tumbleweed
Version: 0.7.0 Vendor: openSUSE
Release: 1.2 Build date: Fri Mar 1 09:23:24 2024
Group: Productivity/Security Build host: reproducible
Size: 98978 Source RPM: mokutil-0.7.0-1.2.src.rpm
Packager: https://bugs.opensuse.org
Url: https://github.com/lcp/mokutil
Summary: Tools for manipulating machine owner keys
This program provides the means to enroll and erase the machine owner
keys (MOK) stored in the database of shim.

Provides

Requires

License

GPL-3.0-only

Changelog

* Fri Mar 01 2024 Dennis Tseng <dennis.tseng@suse.com>
  - Update to 0.7.0
      + 82694cb Show usage instead of aborting on bad flags
      + 04791c2 mokutil bugfix: del unused opt "-s"
      + d978c18 Fix leak of list in delete_data_from_req_var()
      + e498f64 Fix leak of fd in mok_get_variable()
      + 7b6258a Show the key owner GUID
      + 51b5e55 Use PKG_PROG_PKG_CONFIG macro from pkg.m4 to detect pkg-config
      + 1aefcdb mokutil: handle the parsing error from "mok-variables"
      + 71140ef mokutil: Fix memory leak in export_db_keys
      + 0011d52 mokutil:check the result of malloc() is necessary
      + a0d8702 Fix inconsistency in skip messages
      + ae59d89 man: add "--trust-mok" and "--untrust-mok"
      + dd55c28 Avoid conflicting efi_char16_t type definitions
      + 8b6d116 fix: typo "accesss" -> "access"
      + f68a4f4 Do not exit with non zero status for version query
      + 5f49730 Check for efi variabales support after processing commands
      + 2d6c409 Return 0 after printing help messages
      + c64741d Add support for SSPPolicy, depricate --set-sbat-policy delete
      + 48e3d2a Fix tab alignment for help (set-fallback-verbosity/set-fallback-noreboot)
      + c361087 (HEAD -> master, tag: 0.7.0, origin/ssppolicy-v2-fix, origin/master, origin/HEAD) Rename "previous" revocations to "automatic"
* Fri Feb 23 2024 pgajdos@suse.com
  - Use %patch -P N instead of deprecated %patchN.
* Tue Sep 19 2023 Joey Lee <jlee@suse.com>
  - Sync change log to prepare for sending mokutil 0.6.0 to SLE15-SP6
    (jsc#PED-6528)
    - Removed the following backported patches because they are merged
      to 0.6.0:
    - mokutil-fix-missing-header.patch
    b15e7c4d7 util: add the missing stdio.h
    - mokutil-enable-setting-fallback-verbosity-and-norebo.patch (bsc#1198458)
    57bc38582 mokutil: enable setting fallback verbosity and noreboot mode
    - mokutil-SBAT-revocation-update-support.patch (bsc#1198458)
    6c9890730 SBAT revocation update support
* Fri Aug 18 2023 Gary Ching-Pang Lin <glin@suse.com>
  - Remove modhash (bsc#1214358)
    + The modhash script is rarely used and it's impractical to block
      a kernel module with the hash.
* Mon Jun 27 2022 Joey Lee <jlee@suse.com>
  - Update to 0.6.0
      + 6c98907 SBAT revocation update support
      + 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys
      + 57bc385 mokutil: enable setting fallback verbosity and noreboot mode
      + b15e7c4 util: add the missing stdio.h
  - Drop mokutil-fix-missing-header.patch (upstream)
* Thu Jul 15 2021 Gary Ching-Pang Lin <glin@suse.com>
  - Update to 0.5.0
    + mokutil: delete key/hash from the reverse request
    + efi_x509: fix an error handling in is_immediate_ca()
    + efi_x509: fix certificates fingerprint calculation
    + efi_x509: use EVP_Digest()* functions instead of the deprecated
      SHA1_*()
    + src/util.c: fix NULL pointer dereference in mok_get_variable
    + mokutil: Read the SbatLevelRT variable to get the SBAT entries
    + mokutil: add mok-variables parsing support
    + mokutil: Add option to print the UEFI SBAT variable content
    + mokutil: only check for Secure Boot support in options that
      need it
    + efi_x509: add the function to fetch SKID
    + keyring: add the function to check kernel keyring
    + mokutil: initialize data for efi_get_variable()
    + mokutil: correct the data for efi_set_variable() in
      set_password()
    + mokutil: improve the readability of issue_mok_request()
    + mokutil: drop the checks for PK and KEK
    + mokutil: check the blocklists before enrolling a key
    + mokutil: adjust the command bits
    + mokutil: remove "--simple-hash"
    + make CA check non-fatal
    + mokutil: close file in the error path
    + mokutil: do the CA check
    + efi_x509: add the function to check immediate CA
    + efi_x509: use d2i_X509() to create X509 handling
    + mokutil: rename hash_file as pw_hash_file
    + password-crypt: update the function names
    + password-crypt: fix the types of several functions
    + mokutil: fix the error message in sb_state()
    + mokutil: move x509 functions to efi_x509.c
    + mokutil: move the hash functions to efi_hash.c
    + util: add functions for db_var_name and db_friendly_name
    + Remove the SHA1 code from identify_hash_type()
    + Map the UEFI variable names with a function
    + Fix -Wcast-align warnings
    + Fix 32 bit build
    + Add --timeout to manpage and other corrections.
    + mokutil.c: fix typo enrollement -> enrollment
    + Avoid taking pointer to packed struct
    + Fix name of --enable-validation in the description
    + Remove shebang from bash-completion/mokutil
  - Add mokutil-fix-missing-header.patch to fix the compilation error
    due to the missing header
  - Refresh mokutil-remove-libkeyutils-check.patch and only apply
    it to openSUSE Leap 15.*
  - Drop upstreamed patches:
    + mokutil-remove-shebang-from-bash-completion-file.patch
    + mokutil-bsc1173115-add-ca-and-keyring-checks.patch
  - Drop mokutil-support-revoke-builtin-cert.patch since we don't use
    the builtin cert prompt patch in shim anymore.
* Tue May 04 2021 Dirk Müller <dmueller@suse.com>
  - spec file cleanup
* Wed Sep 16 2020 Gary Ching-Pang Lin <glin@suse.com>
  - Add mokutil-bsc1173115-add-ca-and-keyring-checks.patch to add
    options for CA and kernel keyring checks (bsc#1173115)
    + Add new BuildRequires: keyutils-devel
    + Add mokutil-remove-libkeyutils-check.patch to disable the
      version check of libkeyutils
  - Refresh mokutil-support-revoke-builtin-cert.patch
* Fri Aug 14 2020 Gary Ching-Pang Lin <glin@suse.com>
  - Update mokutil-support-revoke-builtin-cert.patch
    + Add "--revoke-cert" to the man page
* Fri Dec 13 2019 Michel Normand <normand@linux.vnet.ibm.com>
  - Add build for ppc64/ppc64le

Files

/usr/bin/mokutil
/usr/share/bash-completion/completions
/usr/share/bash-completion/completions/mokutil
/usr/share/licenses/mokutil
/usr/share/licenses/mokutil/COPYING
/usr/share/man/man1/mokutil.1.gz


Generated by rpm2html 1.8.1

Fabrice Bellet, Sat May 18 23:31:58 2024