From fe71d278ad0c5598b6e54603ae92118e34a28971 Mon Sep 17 00:00:00 2001 From: Dimitri John Ledkov Date: Thu, 17 Nov 2022 17:38:00 +0100 Subject: [PATCH] UBUNTU: [Packaging] Expose built-in trusted and revoked certificates BugLink: https://bugs.launchpad.net/bugs/1996892 Kernels have a set of builtin trusted and revoked certificates as a bundle. It is not very easy to access them, one needs to either download linux kernel package source code; or boot the kernel to look up builtin hashes; and then find certificates externally. It would be more convenient for inspection to expose these in the buildinfo package, which already exposes auxiliary kernel information. Signed-off-by: Dimitri John Ledkov Acked-by: Tim Gardner Acked-by: Cory Todd Signed-off-by: Stefan Bader Signed-off-by: Dimitri John Ledkov --- debian/rules.d/2-binary-arch.mk | 2 ++ 1 file changed, 2 insertions(+) diff --git a/debian/rules.d/2-binary-arch.mk b/debian/rules.d/2-binary-arch.mk index 270c78185b13e..4920d6aae4c7a 100644 --- a/debian/rules.d/2-binary-arch.mk +++ b/debian/rules.d/2-binary-arch.mk @@ -512,6 +512,8 @@ endif $(pkgdir_bldinfo)/usr/lib/linux/$(abi_release)-$*/retpoline install -m644 $(abidir)/$*.compiler \ $(pkgdir_bldinfo)/usr/lib/linux/$(abi_release)-$*/compiler + install -m644 $(DROOT)/canonical-certs.pem $(pkgdir_bldinfo)/usr/lib/linux/$(abi_release)-$*/canonical-certs.pem + install -m644 $(DROOT)/canonical-revoked-certs.pem $(pkgdir_bldinfo)/usr/lib/linux/$(abi_release)-$*/canonical-revoked-certs.pem ifneq ($(full_build),false) # Clean out this flavours build directory.