[ubuntu/quantal] grub2 2.00-7ubuntu3 (Accepted)

[Colin Watson]

grub2 (2.00-7ubuntu3) quantal; urgency=low

  * If the postinst is running in a container, skip grub-install and all its
    associated questions (LP: #1060404).
  * Merge UEFI secure boot tweaks from Fedora:
    - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
    - Add sleep to the list of modules in the signed image.
  * Move Ubuntu modifications to the Fedora linuxefi patch into separate
    patches, to ease maintenance.
  * Implement secure boot handling policy as outlined by Steve Langasek:
    - Make the linux module call linuxefi when necessary, simplifying
      configuration.  Add the linux module to the signed image.
    - If secure boot is enabled and the kernel is signed, linux will call
      linuxefi to hand over to it without calling ExitBootServices.
    - Otherwise, linux will fall through to previous code, call
      ExitBootServices itself, and boot the kernel normally.
    - Change linuxefi to return GRUB_ERR_ACCESS_DENIED rather than
      GRUB_ERR_INVALID_COMMAND in the case of an invalid signature, to make
      it easier to implement different handling of unsigned kernels in
      future if necessary.
  * Build two images for signing: one with prefix /EFI/BOOT for use on
    removable media, and one with prefix /EFI/ubuntu (and with the lvm,
    mdraid09, and mdraid1x modules added) for use on fixed disks.  Setup
    mostly borrowed from Fedora.
  * Generate configuration for signed UEFI kernels if available.

Date: Sun, 07 Oct 2012 11:36:29 +0100
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/grub2/2.00-7ubuntu3
-------------- next part --------------
Format: 1.8
Date: Sun, 07 Oct 2012 11:36:29 +0100
Source: grub2
Binary: grub2 grub-linuxbios grub-efi grub-common grub2-common grub-emu grub-emu-dbg grub-pc-bin grub-pc-dbg grub-pc grub-rescue-pc grub-coreboot-bin grub-coreboot-dbg grub-coreboot grub-efi-ia32-bin grub-efi-ia32-dbg grub-efi-ia32 grub-efi-amd64-bin grub-efi-amd64-dbg grub-efi-amd64 grub-efi-ia64-bin grub-efi-ia64-dbg grub-efi-ia64 grub-ieee1275-bin grub-ieee1275-dbg grub-ieee1275 grub-firmware-qemu grub-yeeloong-bin grub-yeeloong-dbg grub-yeeloong grub-theme-starfield grub-mount-udeb
Architecture: source
Version: 2.00-7ubuntu3
Distribution: quantal
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Description: 
 grub-common - GRand Unified Bootloader (common files)
 grub-coreboot - GRand Unified Bootloader, version 2 (Coreboot version)
 grub-coreboot-bin - GRand Unified Bootloader, version 2 (Coreboot binaries)
 grub-coreboot-dbg - GRand Unified Bootloader, version 2 (Coreboot debug files)
 grub-efi   - GRand Unified Bootloader, version 2 (dummy package)
 grub-efi-amd64 - GRand Unified Bootloader, version 2 (EFI-AMD64 version)
 grub-efi-amd64-bin - GRand Unified Bootloader, version 2 (EFI-AMD64 binaries)
 grub-efi-amd64-dbg - GRand Unified Bootloader, version 2 (EFI-AMD64 debug files)
 grub-efi-ia32 - GRand Unified Bootloader, version 2 (EFI-IA32 version)
 grub-efi-ia32-bin - GRand Unified Bootloader, version 2 (EFI-IA32 binaries)
 grub-efi-ia32-dbg - GRand Unified Bootloader, version 2 (EFI-IA32 debug files)
 grub-efi-ia64 - GRand Unified Bootloader, version 2 (IA64 version)
 grub-efi-ia64-bin - GRand Unified Bootloader, version 2 (IA64 binaries)
 grub-efi-ia64-dbg - GRand Unified Bootloader, version 2 (IA64 debug files)
 grub-emu   - GRand Unified Bootloader, version 2 (emulated version)
 grub-emu-dbg - GRand Unified Bootloader, version 2 (emulated debug files)
 grub-firmware-qemu - GRUB firmware image for QEMU
 grub-ieee1275 - GRand Unified Bootloader, version 2 (Open Firmware version)
 grub-ieee1275-bin - GRand Unified Bootloader, version 2 (Open Firmware binaries)
 grub-ieee1275-dbg - GRand Unified Bootloader, version 2 (Open Firmware debug files)
 grub-linuxbios - GRand Unified Bootloader, version 2 (dummy package)
 grub-mount-udeb - export GRUB filesystems using FUSE (udeb)
 grub-pc    - GRand Unified Bootloader, version 2 (PC/BIOS version)
 grub-pc-bin - GRand Unified Bootloader, version 2 (PC/BIOS binaries)
 grub-pc-dbg - GRand Unified Bootloader, version 2 (PC/BIOS debug files)
 grub-rescue-pc - GRUB bootable rescue images, version 2 (PC/BIOS version)
 grub-theme-starfield - GRand Unified Bootloader, version 2 (starfield theme)
 grub-yeeloong - GRand Unified Bootloader, version 2 (Yeeloong version)
 grub-yeeloong-bin - GRand Unified Bootloader, version 2 (Yeeloong binaries)
 grub-yeeloong-dbg - GRand Unified Bootloader, version 2 (Yeeloong debug files)
 grub2      - GRand Unified Bootloader, version 2 (dummy package)
 grub2-common - GRand Unified Bootloader (common files for version 2)
Launchpad-Bugs-Fixed: 1060404
Changes: 
 grub2 (2.00-7ubuntu3) quantal; urgency=low
 .
   * If the postinst is running in a container, skip grub-install and all its
     associated questions (LP: #1060404).
   * Merge UEFI secure boot tweaks from Fedora:
     - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
     - Add sleep to the list of modules in the signed image.
   * Move Ubuntu modifications to the Fedora linuxefi patch into separate
     patches, to ease maintenance.
   * Implement secure boot handling policy as outlined by Steve Langasek:
     - Make the linux module call linuxefi when necessary, simplifying
       configuration.  Add the linux module to the signed image.
     - If secure boot is enabled and the kernel is signed, linux will call
       linuxefi to hand over to it without calling ExitBootServices.
     - Otherwise, linux will fall through to previous code, call
       ExitBootServices itself, and boot the kernel normally.
     - Change linuxefi to return GRUB_ERR_ACCESS_DENIED rather than
       GRUB_ERR_INVALID_COMMAND in the case of an invalid signature, to make
       it easier to implement different handling of unsigned kernels in
       future if necessary.
   * Build two images for signing: one with prefix /EFI/BOOT for use on
     removable media, and one with prefix /EFI/ubuntu (and with the lvm,
     mdraid09, and mdraid1x modules added) for use on fixed disks.  Setup
     mostly borrowed from Fedora.
   * Generate configuration for signed UEFI kernels if available.
Checksums-Sha1: 
 457cc8b2580ab8fc3824a16642c21e5654576cc7 4569 grub2_2.00-7ubuntu3.dsc
 62996ae512a3768a672a6573d124639609cb6d3b 371042 grub2_2.00-7ubuntu3.debian.tar.gz
Checksums-Sha256: 
 7b122da9fbe6fbd184449646e568d5f6fc52ff219aed14fb284b062af27d2a0e 4569 grub2_2.00-7ubuntu3.dsc
 5cc383b66be86922bcef4e2d551e82893f6e991afabcd6ce388a943123ae846e 371042 grub2_2.00-7ubuntu3.debian.tar.gz
Files: 
 d10cd04f85966863abb5aef4ef44c44e 4569 admin extra grub2_2.00-7ubuntu3.dsc
 d7e174d6b200c6a35c82a8697285cc88 371042 admin extra grub2_2.00-7ubuntu3.debian.tar.gz
Original-Maintainer: GRUB Maintainers <pkg-grub-devel at lists.alioth.debian.org>