[pesign/f18] Only sign things on x86_64; all else ignore gracefully.
Peter Jones
pjones at fedoraproject.org
Tue Aug 14 19:47:17 UTC 2012
commit cc70e8687e31b201652a95036a91aa987b865e5a
Author: Peter Jones <pjones at redhat.com>
Date: Tue Aug 14 15:46:35 2012 -0400
Only sign things on x86_64; all else ignore gracefully.
pesign-0.10-only-sign-on-x86-64.patch | 26 ++++++++++++++++++++++++++
pesign.spec | 6 +++++-
2 files changed, 31 insertions(+), 1 deletions(-)
---
diff --git a/pesign-0.10-only-sign-on-x86-64.patch b/pesign-0.10-only-sign-on-x86-64.patch
new file mode 100644
index 0000000..01dcdfa
--- /dev/null
+++ b/pesign-0.10-only-sign-on-x86-64.patch
@@ -0,0 +1,26 @@
+From a8e0e93a15ae57dcfc2bf20921fc5fe604dee3fa Mon Sep 17 00:00:00 2001
+From: Peter Jones <pjones at redhat.com>
+Date: Tue, 14 Aug 2012 15:44:26 -0400
+Subject: [PATCH] Only sign things on x86_64.
+
+---
+ src/macros.pesign | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/src/macros.pesign b/src/macros.pesign
+index beb6489..7932629 100644
+--- a/src/macros.pesign
++++ b/src/macros.pesign
+@@ -9,6 +9,6 @@
+ %__pesign_token %{expand: %%{nil} %%{?pe_signing_token:-t "%%{pe_signing_token}"}}
+ %__pesign_cert %{expand: %%{!?pe_signing_cert:-c "Red Hat Test Certificate"} %%{?pe_signing_cert:-c "%%{pe_signing_cert}"}}
+
+-%_pesign /usr/bin/pesign
+-%pesign \
+-%{_pesign} %{__pesign_token} %{__pesign_cert}
++%_pesign %{expand:%%([ %%{_arch} == x86_64 ] && echo /usr/bin/pesign || echo /usr/bin/true)}
++
++%pesign %{_pesign} %{__pesign_token} %{__pesign_cert}
+--
+1.7.11.4
+
diff --git a/pesign.spec b/pesign.spec
index 1f48e69..5365ae7 100644
--- a/pesign.spec
+++ b/pesign.spec
@@ -1,7 +1,7 @@
Summary: Signing utility for UEFI binaries
Name: pesign
Version: 0.10
-Release: 2%{?dist}
+Release: 3%{?dist}
Group: Development/System
License: GPLv2
URL: https://github.com/vathpela/pesign
@@ -17,6 +17,7 @@ Source0: pesign-%{version}.tar.bz2
Source1: rh-test-certs.tar.bz2
Patch0: pesign-0.10-better-macros.patch
+Patch1: pesign-0.10-only-sign-on-x86-64.patch
%description
This package contains the pesign utility for signing UEFI binaries as
@@ -57,6 +58,9 @@ rm -rf %{buildroot}
%attr(0644,root,root) /etc/pki/pesign/*
%changelog
+* Tue Aug 14 2012 Peter Jones <pjones at redhat.com> - 0.10-3
+- Only sign things on x86_64; all else ignore gracefully.
+
* Tue Aug 14 2012 Peter Jones <pjones at redhat.com> - 0.10-2
- Make macros.pesign more reliable
More information about the scm-commits
mailing list