[OS-BUILD PATCHv3 6/6] redhat: Use redhatsecureboot701 for ppc64le

[Jan Stancek (via Email Bridge)]

From: Jan Stancek <jstancek(a)redhat.com&gt;

redhat: Use redhatsecureboot701 for ppc64le

Forward-port of c9s commit
    dd9a91221db9 ("redhat: Use redhatsecureboot701 for ppc64le")

Conflicts: RHEL has certs stored in system-sb-certs package,
           but ARK/Fedora has them in tree.

When addressing CVE-2022-1665 the ppc64le signing keys were rotated but
the kernel itself was not updated to use the new key.

Signed-off-by: Patrick Talbert <ptalbert(a)redhat.com&gt;
Signed-off-by: Prarit Bhargava <prarit(a)redhat.com&gt;
Signed-off-by: Jan Stancek <jstancek(a)redhat.com&gt;

diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -839,7 +839,7 @@ Source13: redhatsecureboot501.cer
 %define pesign_name_0 redhatsecureboot302
 %endif
 %ifarch ppc64le
-%define pesign_name_0 redhatsecureboot601
+%define pesign_name_0 redhatsecureboot701
 %endif
 %endif
 # rhel && !eln

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2849