Bandie/grub2-signing-extension
1
0
Fork 0
mirror of https://github.com/Bandie/grub2-signing-extension.git synced 2024-04-01 15:51:26 +00:00
Code Issues Projects Releases Wiki Activity

Excluding the EFI directory. Fixes #10

Browse Source
This commit is contained in:
Bandie 2021-02-13 13:54:17 +01:00
parent d04a4e5151
commit 4b42d088eb
Signed by: Bandie
GPG Key ID: 843D7FA93BA46312
3 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sbin/grub-sign
View File

@ -5,7 +5,7 @@
# Licence: GNU-GPLv3 # Licence: GNU-GPLv3
function sign(){ function sign(){
for f in `find /boot -type f` for f in $(find /boot -iname "efi" -prune -o -type f -print)
do do
if gpg --detach-sign $f if gpg --detach-sign $f
then then

2
sbin/grub-unsign
View File

@ -21,7 +21,7 @@ case "$stat" in
;& ;&
0|3) 0|3)
# Then remove the signatures. # Then remove the signatures.
find /boot -name '*.sig' -exec rm {} + find /boot -iname "efi" -prune -o -name '*.sig' -exec rm {} +
echo "GRUB2 unsigned. WARNING: If you want to deactivate GRUB2's signature feature, change the check_signatures variable in the headers file!" echo "GRUB2 unsigned. WARNING: If you want to deactivate GRUB2's signature feature, change the check_signatures variable in the headers file!"
exit 0 exit 0

4
sbin/grub-verify
View File

@ -22,7 +22,7 @@ do
error_files+=( "$i" ) error_files+=( "$i" )
fi fi
all_files+=( "$i" ) all_files+=( "$i" )
done < <(find /boot -type f -name "*.sig" -print0) done < <(find /boot -iname "efi" -prune -o -type f -name "*.sig" -print0)
echo "Checking missing signatures in /boot..." >&2 echo "Checking missing signatures in /boot..." >&2
while IFS= read -r -d '' i while IFS= read -r -d '' i
@ -31,7 +31,7 @@ do
then then
missing_files+=( "$i" ) missing_files+=( "$i" )
fi fi
done < <(find /boot -type f -not -name "*.sig" -print0) done < <(find /boot -iname "efi" -prune -o -type f -not -name "*.sig" -print0)
# Nothing to verify? Exit 2. # Nothing to verify? Exit 2.
if (( ${#all_files[@]} == 0 )) if (( ${#all_files[@]} == 0 ))