mirror of
https://github.com/Bandie/grub2-signing-extension.git
synced 2024-04-01 15:51:26 +00:00
34 lines
515 B
Bash
Executable File
34 lines
515 B
Bash
Executable File
#!/bin/bash
|
|
# grub2-update-kernel-signature
|
|
# Renews the signature in /boot/.
|
|
# Author: Bandie
|
|
# Licence: GNU-GPLv3
|
|
|
|
function sign(){
|
|
for f in `find /boot -maxdepth 1 -type f`
|
|
do
|
|
if gpg --detach-sign $f
|
|
then
|
|
echo $f signed.
|
|
else
|
|
return 1
|
|
fi
|
|
done
|
|
if gpg --detach-sign "/boot/grub/grub.cfg"
|
|
then
|
|
echo /boot/grub/grub.cfg signed.
|
|
else
|
|
return 1
|
|
fi
|
|
return 0
|
|
}
|
|
|
|
|
|
shred --remove=unlink /boot/*.sig
|
|
shred --remove=unlink /boot/grub/grub.cfg.sig
|
|
|
|
if ! sign
|
|
then
|
|
sign
|
|
fi
|