Comment # 5 on bug 1193282 from
(In reply to Ludwig Nussel from comment #2)
> btw, the data in SBAT I suppose needs to comply to certain standards. Would
> it be possible to package that data in a form consumable by other packages?

https://github.com/rhboot/shim/blob/main/SBAT.md#generation-based-revocation-metadata 

> I just noticed that systemd will need the data in the future. 

Is it systemd-boot ? It seems to request for Microsoft signing recently.

> I guess we
> should avoid duplicating it.
> Could be as simple as rpm macros or some shell sourceable config.

Yes defining rpm marcos for common sbat vaules would be helpful, eg vendor_name
and vendor_url.


You are receiving this mail because: