Sign the default/fallback loader

darander · darander · commit 18855d041861 · 2017-02-03T08:35:28.000+01:00
Apart from installing systemd-boot at /EFI/systemd/*, bootctl also installs a
default/fallback loader at /EFI/BOOT/BOOT*.EFI. Sign this loader too.

Signed-off-by: Anders Darander &lt;anders.darander@gmail.com&gt;
diff --git a/sicherboot b/sicherboot
@@ -169,6 +169,7 @@ BOOTCTL_HELP="Usage: sicherboot bootctl [<argument> ...]
 bootctl() {
     command bootctl --path="$BOOT_EFI_DIR" "$@"
     sign_image "$BOOT_EFI_DIR/EFI/systemd/systemd-boot${EFI_ARCH}.efi"
+    sign_image "$BOOT_EFI_DIR/EFI/BOOT/BOOT`echo ${EFI_ARCH} | tr '[:lower:]' '[:upper:]'`.EFI"
 }
 
 

Original file line number	Diff line number	Diff line change
`@@ -169,6 +169,7 @@ BOOTCTL_HELP="Usage: sicherboot bootctl [<argument> ...]`
`169`	`169`	`bootctl() {`
`170`	`170`	`command bootctl --path="$BOOT_EFI_DIR" "$@"`
`171`	`171`	`sign_image "$BOOT_EFI_DIR/EFI/systemd/systemd-boot${EFI_ARCH}.efi"`
	`172`	+ sign_image "$BOOT_EFI_DIR/EFI/BOOT/BOOT`echo ${EFI_ARCH} \| tr '[:lower:]' '[:upper:]'`.EFI"
`172`	`173`	`}`
`173`	`174`
`174`	`175`