2018-01-12 20:46:55 +00:00
|
|
|
#!/bin/bash
|
|
|
|
|
# grub2-update-kernel-signature
|
|
|
|
|
# Renews the signature in /boot/.
|
|
|
|
|
# Author: Bandie
|
|
|
|
|
# Licence: GNU-GPLv3
|
|
|
|
|
|
|
|
|
|
function sign(){
|
|
|
|
|
for f in `find /boot -maxdepth 1 -type f`
|
|
|
|
|
do
|
|
|
|
|
if gpg --detach-sign $f
|
|
|
|
|
then
|
|
|
|
|
echo $f signed.
|
|
|
|
|
else
|
|
|
|
|
return 1
|
|
|
|
|
fi
|
|
|
|
|
done
|
2019-12-11 18:49:09 +00:00
|
|
|
if gpg --detach-sign "/boot/grub/grub.cfg"
|
|
|
|
|
then
|
|
|
|
|
echo /boot/grub/grub.cfg signed.
|
|
|
|
|
else
|
|
|
|
|
return 1
|
|
|
|
|
fi
|
2018-01-12 20:46:55 +00:00
|
|
|
return 0
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
2021-07-22 21:15:09 +00:00
|
|
|
shred --remove=unlink /boot/*.sig
|
|
|
|
|
shred --remove=unlink /boot/grub/grub.cfg.sig
|
2018-01-12 20:46:55 +00:00
|
|
|
|
|
|
|
|
if ! sign
|
|
|
|
|
then
|
|
|
|
|
sign
|
|
|
|
|
fi
|
