Changelog for tboot-1.10.5-2.el9.x86_64.rpm :

* Thu Aug 18 2022 Tony Camuso - 1:1.10.5-2- The install scriptlet in %post was choosing the first grub.cfg file it encountered, which was /boot/efi/EFI/redhat/grub.cfg. This is a stub that defines grub boot disk UUID necessary for proper grubenv setup, and it must not be overwritten or changed. Modify the scriptlet to target /boot/grub2/grub.cfg Additionally, remove any wrongly created /boot/grub2/x86_64-efi directory and recreate the correct /boot/efi/EFI/redhat/grub.cfg stub file. Added a %postun section to cleanup when removing tboot with dnf erase. Thanks to Lenny Szubowicz for the bash code to recreate the /boot/efi/EFI/redhat/grub.cfg stub file. Resolves: rhbz#2112236
* Wed May 04 2022 Tony Camuso - 1:1.10.5-1- Upgrade to tboot-1.10.5-1 for fixes and updates.- Added a Requires line to install grub2-efi-x64-modules- Added a scriptlet to the tboot.spec file to automatically install grub2-efi-x64-modules and move them to the correct directory.- Removed three patches that are no longer needed.- Added two patches from upstream, one for a fix, the other cosemetic.- Resolves: rhbz#2041766 Resolves: rhbz#2040083
* Thu Sep 30 2021 Tony Camuso - 1:1.10.2-6- Use sha256 as default hashing algorithm Resolves: rhbz#1935448
* Tue Aug 10 2021 Mohan Boddu - 1:1.10.2-5- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688
* Wed Jul 28 2021 Tony Camuso - 1:1.10.2-4- From Miroslave Vadkerti: Onboarding tests to RHEL9 in BaseOS CI requires action, adding test configuration in our \"dispatcher\" configuration for RHEL9: https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml Test config was added for tboot in the following MR. https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686 Resolves: rhbz#1922002
* Tue Jul 27 2021 Tony Camuso - 1:1.10.2-3- Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 macros to assure the build meets RHEL security requirements. Resolves: rhbz#1922002
* Thu Jul 22 2021 Tony Camuso - 1:1.10.2-2- Bump the NVR as a result of including the gating.yaml file in the git repo. Resolves: rhbz#1922002
* Mon Jun 21 2021 Tony Camuso - 1:1.10.2-1- The patches are for SSL3 compatibility. These can probably be removed when upstream tboot fully implements SSL3.- Upgrade to latest upstream.- Remove trousers dependency. Resolves: rhbz#1922002 Resolves: rhbz#1870520 Resolves: rhbz#1927374
* Wed Jun 16 2021 Mohan Boddu - 1:1.9.11-9- Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065
* Thu May 27 2021 Tony Camuso - 1:1.9.11-8- Add -Wno-error=deprecated-declarations to the Config.mk patch Resolves: rhbz#1958031
* Fri Apr 16 2021 Mohan Boddu - 1:1.9.11-7- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
* Wed Jan 27 2021 Fedora Release Engineering - 1:1.9.11-6- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Fri Oct 30 2020 Jeff Law - 1:1.9.11-5- Re-enable -Wstringop-overflow and instead make the problematical pointer volatile to avoid the false positive diagnostic
* Thu Oct 29 2020 Jeff Law - 1:1.9.11-4- Fix buglet exposed by gcc-11 -Warray-parameter- Temporarily disable -Wstringop-overflow due to false positive in gcc-11