Bug#1089433: shim-helpers-arm64-signed: Supporting rootless builds by default

From	Emanuele Rocca <ema@debian.org>
Newsgroups	linux.debian.bugs.rc
Subject	Bug#1089433: shim-helpers-arm64-signed: Supporting rootless builds by default
Date	2025-04-11 21:20 +0200
Message-ID	<KAs4V-cOFa-7@gated-at.bofh.it> (permalink)
References	(1 earlier) <KAs4V-cOFa-9@gated-at.bofh.it> <KAs4V-cOFa-9@gated-at.bofh.it> <KAs4V-cOFa-11@gated-at.bofh.it> <KAs4V-cOFa-9@gated-at.bofh.it> <KAs4V-cOFa-11@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hello Niels,

On 2024-12-28 01:06, Niels Thykier wrote:
> Please review attached as an example of how to fix this problem.
> 
> Note: Untested, since I was doing my testing on amd64.

LGTM. I applied your patch and built the package with a regular user as
follows:

$ dpkg-buildpackage -us -uc -b -rfakeroot

The signed files in the resulting binary have the right user, group, and
permissions:

$ dpkg --contents shim-helpers-arm64-signed_1+15.8+1+nmu1_arm64.deb | grep -F .signed
-rw-r--r-- root/root     90752 2024-12-28 12:03 ./usr/lib/shim/fbaa64.efi.signed
-rw-r--r-- root/root    887472 2024-12-28 12:03 ./usr/lib/shim/mmaa64.efi.signed

As far as I understand though, the shim-helpers-arm64-signed source
package is generated by shim. I think the file we want to change is
debian/signing-template/rules in the shim sources. Ditto for
debian/signing-template/control.in.

See attached patch.

Back to linux.debian.bugs.rc | Previous | Next | Find similar | Unroll thread

Thread

Bug#1089433: shim-helpers-arm64-signed: Supporting rootless builds by default Emanuele Rocca <ema@debian.org> - 2025-04-11 21:20 +0200

csiph-web