From c7b049cc96da4dca5bb81b2057323e24cfd27f77 Mon Sep 17 00:00:00 2001
From: Bandie <bandie@chaospott.de>
Date: Thu, 22 Jul 2021 23:15:09 +0200
Subject: [PATCH] Usage of shred instead of rm

---
 sbin/grub-unsign                  | 2 +-
 sbin/grub-update-kernel-signature | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/sbin/grub-unsign b/sbin/grub-unsign
index e6934c2..e6b2fce 100755
--- a/sbin/grub-unsign
+++ b/sbin/grub-unsign
@@ -21,7 +21,7 @@ case "$stat" in
 	;&
 0|3)	
   # Then remove the signatures.
-  find /boot -iname "efi" -prune -o -name '*.sig' -exec rm {} +
+  find /boot -iname "efi" -prune -o -name '*.sig' -exec shred --remove=unlink {} +
 
   echo "GRUB2 unsigned. WARNING: If you want to deactivate GRUB2's signature feature, change the check_signatures variable in the headers file!"
   exit 0
diff --git a/sbin/grub-update-kernel-signature b/sbin/grub-update-kernel-signature
index 947699e..2ef2580 100755
--- a/sbin/grub-update-kernel-signature
+++ b/sbin/grub-update-kernel-signature
@@ -24,8 +24,8 @@ function sign(){
 }
 
 
-rm /boot/*.sig
-rm /boot/grub/grub.cfg.sig
+shred --remove=unlink /boot/*.sig
+shred --remove=unlink /boot/grub/grub.cfg.sig
 
 if ! sign
 then