File project.diff of Package shim-leap
--- shim-leap.changes.orig
+++ shim-leap.changes
@@ -1,4 +1,28 @@
-------------------------------------------------------------------
+Wed Jan 25 12:49:10 UTC 2023 - Olaf Kirch <okir@suse.com>
+
+- Enhance cryptodisk code to recognize new variables in /etc/default/grub:
+ * GRUB_TPM_AUTHORIZED_POLICY
+ * GRUB_TPM_PUBLIC_KEY
+ * GRUB_TPM_SIGNATURE
+ These were added in support of TPM2 authorized policies
+
+-------------------------------------------------------------------
+Wed Nov 23 10:17:08 UTC 2022 - Olaf Kirch <okir@suse.com>
+
+- Enhance cryptodisk code to recognize new variables in /etc/default/grub:
+ * GRUB_CRYPTODISK_PASSWORD
+ * GRUB_TPM2_SEALED_KEY
+ * GRUB_TPM2_PCR_BANK and GRUB_TPM2_PCR_LIST
+- Introduce --no-grub-install option
+
+-------------------------------------------------------------------
+Thu Sep 15 09:15:18 UTC 2022 - Gary Ching-Pang Lin <glin@suse.com>
+
+- Override shim-install to write tpm_record_pcrs into grub.cfg.
+ (jsc#PED-922)
+
+-------------------------------------------------------------------
Wed Jul 21 09:38:30 UTC 2021 - jlee@suse.com
- Update to shim to 15.4-lp152.4.17.1 from openSUSE Leap 15.2
--- shim-leap.spec.orig
+++ shim-leap.spec
@@ -1,7 +1,7 @@
#
# spec file for package shim-leap
#
-# Copyright (c) 2021 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -12,7 +12,7 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
@@ -32,6 +32,7 @@ License: BSD-2-Clause
Group: System/Boot
Source: shim-15.4-lp152.4.17.1.x86_64.rpm
Source1: README
+Source2: shim-install
BuildRoot: %{_tmppath}/%{name}-%{version}-build
ExclusiveArch: x86_64
@@ -57,6 +58,9 @@ rpm2cpio %{SOURCE0} | cpio --extract --u
cp -a * %{buildroot}
cp %{S:1} .
+# Override shim-install
+install -m 755 %{S:2} %{buildroot}/%{_sbindir}/shim-install
+
%post -n shim
/sbin/update-bootloader --reinit || true
