Get:1 http://changelogs.ubuntu.com shim-signed 1.19~16.04.1 Changelog [6259 B]
shim-signed (1.19~16.04.1) xenial; urgency=medium
* update-secureboot-policy:
- Add a --help option, document other options. (LP: #1604936)
- Rework prompting to display our Secure Boot warning and explanation
text more prominently, rather than forcing graphical users to hit
"Help" to see the full explanation for why we ask about disabling
Secure Boot. (LP: #1595611)
-- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com> Tue, 02 Aug 2016 15:24:24 -0400
shim-signed (1.18~16.04.1) xenial; urgency=medium
* update-secureboot-policy: If /proc/sys/kernel/moksbstate_disabled is
present, prefer this unconditionally over MokSBStateRT. LP: #1604873.
-- Steve Langasek <steve.langasek@ubuntu.com> Wed, 20 Jul 2016 12:09:58 -0700
shim-signed (1.17~16.04.1) xenial; urgency=medium
* Backport shim-signed 1.17 to 16.04. (LP: #1574727)
-- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com> Thu, 07 Jul 2016 20:17:24 -0400
shim-signed (1.17) yakkety; urgency=medium
* update-secureboot-policy: rework setting capabilities to stop having
the backup capability while showing an error message; which won't affect
the Dialog debconf frontend but otherwise made the GTK frontend confusing.
* update-secureboot-policy: all debconf prompts should be at priority
critical: there is no good default to pick, we must prompt the user.
* debian/templates: make the password inputs be standard inputs; this is an
unfortunate workaround to aptdaemon not having access to the debconf
password database on desktop; since the frontend runs as an unprivileged
user. See bug LP#1599981 (LP: #1599051)
-- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com> Thu, 07 Jul 2016 16:58:45 -0400
shim-signed (1.16) yakkety; urgency=medium
* debian/shim-signed.postinst: call for the trigger on update of shim-signed.
-- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com> Tue, 28 Jun 2016 17:34:23 -0400
shim-signed (1.15) yakkety; urgency=medium
* update-secureboot-policy: validate the state of MokSBStateRT against what
the kernel believes it to be via /proc/sys/kernel/moksbstate_disabled,
in case we have the kernel which knows about shim's validation policy but
an old shim that doesn't export MokSBStateRT.
-- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com> Fri, 17 Jun 2016 16:47:40 +0300
shim-signed (1.14) yakkety; urgency=medium
* update-secureboot-policy:
- Make it easier for users to really re-enable Secure Boot via an --enable
option.
- Don't prompt for action if there are no DKMS packages installed, as per
checking if there are any subdirectories in /var/lib/dkms.
-- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com> Tue, 07 Jun 2016 16:09:53 -0400
shim-signed (1.13) yakkety; urgency=medium
* update-secureboot-policy: have a trigger-ready script available to deal
with the necessity to change Secure Boot policy on a system.
* debian/shim-signed.templates: ship the necessary templates for secureboot.
* debian/shim-signed.postinst: Run our trigger script to update Secure Boot
policy when necessary at the end of installs, without calling dpkg-trigger
again.
-- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com> Mon, 16 May 2016 15:29:27 -0400
shim-signed (1.12) xenial; urgency=medium
* debian/control: add Depends on mokutil, to ship a way for users to
control shim features, such as enrolling new keys.
-- Mathieu Trudel-Lapierre <mathieu-tl@ubuntu.com> Wed, 16 Dec 2015 10:19:23 -0500
shim-signed (1.11) wily; urgency=medium
* Add in an apport package hook for shim-signed and shim. (LP: #1490030)
-- Brian Murray <brian@ubuntu.com> Fri, 11 Sep 2015 15:04:31 -0700
shim-signed (1.10) wily; urgency=medium
* Add a versioned dependency on grub2-common, so that partial upgrades from
Ubuntu 12.04 don't break due to a lack of --target option to grub-install.
LP: #1474203.
-- Steve Langasek <steve.langasek@ubuntu.com> Tue, 14 Jul 2015 10:46:41 -0700
shim-signed (1.9) wily; urgency=medium
* Update to the signed 0.8-0ubuntu2 binary from Microsoft.
-- Steve Langasek <steve.langasek@ubuntu.com> Sun, 07 Jun 2015 19:27:35 +0000
shim-signed (1.8) utopic; urgency=medium
* Update to the signed 0.7-0ubuntu4 binary from Microsoft.
-- Steve Langasek <steve.langasek@ubuntu.com> Tue, 21 Oct 2014 18:23:15 -0400
shim-signed (1.6) trusty; urgency=low
* Also add a build-dependency on grub2-common, to ensure that our
grub-install is the correct one - since grub-efi-amd64-bin is
coinstallable with grub1. LP: #1259558.
-- Steve Langasek <steve.langasek@ubuntu.com> Tue, 10 Dec 2013 09:10:23 -0800
shim-signed (1.5) trusty; urgency=low
* Pass --target=x86_64-efi to grub-install from the postinst and depend on
grub-efi-amd64-bin, so that package upgrades will do the right thing
even if the system has been rebooted under BIOS. LP: #1246910.
* Kubuntu sets GRUB_DISTRIBUTOR to a different value which doesn't match
the path under /boot/efi; fix this up so shim-signed upgrades properly
on Kubuntu systems. LP: #1242417.
-- Steve Langasek <steve.langasek@ubuntu.com> Thu, 31 Oct 2013 17:06:21 -0700
shim-signed (1.4) trusty; urgency=low
* Add a dependency on shim, so that we can pull in MokManager for use.
* Update to the signed 0.4-0ubuntu4 binary from Microsoft.
-- Steve Langasek <steve.langasek@ubuntu.com> Wed, 30 Oct 2013 15:04:23 -0700
shim-signed (1.3) saucy; urgency=low
* Build-depend on sbsigntool (>= 0.6-0ubuntu4) and check the integrity of
our signed binary at build time.
* Update to the signed 0.4-0ubuntu3 binary from Microsoft.
-- Steve Langasek <steve.langasek@ubuntu.com> Sat, 07 Sep 2013 22:09:22 +0000
shim-signed (1.2) raring; urgency=low
* Recommend secureboot-db (LP: #1087843).
-- Colin Watson <cjwatson@ubuntu.com> Sat, 16 Feb 2013 00:02:00 +0000
shim-signed (1.1) quantal-proposed; urgency=low
* Rev shim-signed for updated shim.
-- Steve Langasek <steve.langasek@ubuntu.com> Fri, 12 Oct 2012 01:42:07 +0000
shim-signed (1.0) quantal; urgency=low
* Initial release, based on grub2-signed package.
-- Steve Langasek <steve.langasek@ubuntu.com> Tue, 09 Oct 2012 15:48:37 -0700
Fetched 6259 B in 0s (51.2 kB/s)