File mokutil.spec of Package mokutil.14995

# spec file for package mokutil
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via

Name:           mokutil
Version:        0.3.0
Release:        0
Summary:        Tools for manipulating machine owner keys
License:        GPL-3.0-only
Group:          Productivity/Security
Source:         %{name}-%{version}.tar.bz2
Source1:        modhash
# PATCH-FIX-UPSTREAM mokutil-fix-overflow.patch -- Fix the potential buffer overflow
Patch1:         mokutil-fix-overflow.patch
# PATCH-FIX-UPSTREAM mokutil-fshort-wchar.patch -- Add "-fshort-wchar" to make sure the UEFI strings are UCS-2 encoding
Patch2:         mokutil-fshort-wchar.patch
# PATCH-FIX-UPSTREAM mokutil-set-efi-variable-file-mode.patch -- Be explicit about file modes in all cases
Patch3:         mokutil-set-efi-variable-file-mode.patch
# PATCH-FIX-UPSTREAM mokutil-constify-efi-guid.patch -- Make all efi_guild_t variables const
Patch4:         mokutil-constify-efi-guid.patch
# PATCH-FIX-UPSTREAM mokutil-bsc1170889-check-errno-correctly.patch -- Check errno correctly in list_keys_in_var()
Patch5:         mokutil-bsc1170889-check-errno-correctly.patch
# PATCH-FIX-OPENSUSE mokutil-support-revoke-builtin-cert.patch -- Add an option to revoke the built-in certificate
Patch100:       mokutil-support-revoke-builtin-cert.patch
BuildRequires:  autoconf
BuildRequires:  automake
BuildRequires:  efivar-devel >= 0.12
BuildRequires:  libopenssl-devel >= 0.9.8
BuildRequires:  pkg-config
Requires:       openssl
BuildRoot:      %{_tmppath}/%{name}-%{version}-build
ExclusiveArch:  x86_64 aarch64

This program provides the means to enroll and erase the machine owner
keys (MOK) stored in the database of shim.

    Gary Lin <>

%setup -q
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch100 -p1


install -m 755 -D %{SOURCE1} %{buildroot}/%{_bindir}/modhash

%{?buildroot:%__rm -rf "%{buildroot}"}

%license COPYING

openSUSE Build Service is sponsored by