notes/os/linux/internals/boot/shim-signed.txt
Ihar Hancharenka eafef46e47 m
2024-03-09 09:15:34 +03:00

29 строки
1.1 KiB
Plaintext

Secure Boot chain-loading bootloader (Microsoft-signed binary)
This package provides a minimalist boot loader which allows verifying
signatures of other UEFI binaries against either the Secure Boot DB/DBX or
against a built-in signature database. Its purpose is to allow a small,
infrequently-changing binary to be signed by the UEFI CA, while allowing
an OS distributor to revision their main bootloader independently of the CA.
.
This package contains the version of the bootloader binary signed by the
Microsoft UEFI CA.
$ dpkg -L shim-signed
/etc/kernel/postinst.d/zz-shim
/usr/lib/shim/BOOTX64.CSV
/usr/lib/shim/fbx64.efi
/usr/lib/shim/is-not-revoked
/usr/lib/shim/mmx64.efi
/usr/lib/shim/mok/openssl.cnf
/usr/lib/shim/shimx64.efi.dualsigned
/usr/lib/shim/shimx64.efi.signed.latest
/usr/lib/shim/shimx64.efi.signed.previous
/usr/sbin/update-secureboot-policy
/usr/share/apport/package-hooks/source_shim-signed.py
/usr/share/doc/shim-signed/changelog.Debian.gz
/usr/share/doc/shim-signed/changelog.gz
/usr/share/doc/shim-signed/copyright
/usr/share/lintian/overrides/shim-signed
/var/lib/shim-signed/mok
/usr/share/apport/package-hooks/source_shim.py