diff options
| author | Peter Jones <pjones@redhat.com> | 2012-08-14 15:40:18 -0400 |
|---|---|---|
| committer | Peter Jones <pjones@redhat.com> | 2012-08-14 15:55:13 -0400 |
| commit | d3182f8335eb649867e9b4e9b86acbd53d611529 (patch) | |
| tree | 407b7b091fa4eaefa637e231722f0621c673df22 /kernel.spec | |
| parent | 2b2f1392623cfb1cebe360b60f6c4c5df03992cc (diff) | |
| download | kernel-d3182f8335eb649867e9b4e9b86acbd53d611529.tar.gz kernel-d3182f8335eb649867e9b4e9b86acbd53d611529.tar.xz kernel-d3182f8335eb649867e9b4e9b86acbd53d611529.zip | |
Sign kernels with pesign if we're build with signmodules.
This is jwb's patch modified to work with %pesign .
Diffstat (limited to 'kernel.spec')
| -rw-r--r-- | kernel.spec | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/kernel.spec b/kernel.spec index cd8aba248..ba810aa2a 100644 --- a/kernel.spec +++ b/kernel.spec @@ -552,6 +552,7 @@ BuildRequires: rpm-build >= 4.9.0-1, elfutils >= elfutils-0.153-1 %if %{signmodules} BuildRequires: gnupg +BuildRequires: pesign >= 0.10-3 %endif Source0: ftp://ftp.kernel.org/pub/linux/kernel/v3.0/linux-%{kversion}.tar.xz @@ -1590,6 +1591,11 @@ BuildKernel() { if [ -f arch/$Arch/boot/zImage.stub ]; then cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/%{image_install_path}/zImage.stub-$KernelVer || : fi + %if %{signmodules} + # Sign the image if we're using EFI + %pesign -s -i $KernelImage -o vmlinuz.signed + mv vmlinuz.signed $KernelImage + %endif $CopyKernel $KernelImage \ $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer chmod 755 $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer |