Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #389258 > unrolled thread

Bug#1089433: shim-helpers-arm64-signed: Supporting rootless builds by default

Back to article view | Back to linux.debian.bugs.rc

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1089433: shim-helpers-arm64-signed: Supporting rootless builds by default Emanuele Rocca <ema@debian.org> - 2025-04-11 21:20 +0200

#389258 — Bug#1089433: shim-helpers-arm64-signed: Supporting rootless builds by default

[Multipart message — attachments visible in raw view] — view raw

Hello Niels,

On 2024-12-28 01:06, Niels Thykier wrote:
> Please review attached as an example of how to fix this problem.
> 
> Note: Untested, since I was doing my testing on amd64.

LGTM. I applied your patch and built the package with a regular user as
follows:

$ dpkg-buildpackage -us -uc -b -rfakeroot

The signed files in the resulting binary have the right user, group, and
permissions:

$ dpkg --contents shim-helpers-arm64-signed_1+15.8+1+nmu1_arm64.deb | grep -F .signed
-rw-r--r-- root/root     90752 2024-12-28 12:03 ./usr/lib/shim/fbaa64.efi.signed
-rw-r--r-- root/root    887472 2024-12-28 12:03 ./usr/lib/shim/mmaa64.efi.signed

As far as I understand though, the shim-helpers-arm64-signed source
package is generated by shim. I think the file we want to change is
debian/signing-template/rules in the shim sources. Ditto for
debian/signing-template/control.in.

See attached patch.

[toc] | [standalone]

Back to top | Article view | linux.debian.bugs.rc

csiph-web