パッケージ: shim-signed (1.39~1+deb10u1+15.7-1~deb10u1) [security]
Description: Secure Boot chain-loading bootloader - **NOT** signed
This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA.
NOTICE: This package used to contain the version of the bootloader binary signed by the Microsoft UEFI CA, but significant toolchain problems on arm64 have made it impossible to reliably build a safe arm64 shim for now. See https://wiki.debian.org/SecureBoot#arm64_problems for more information. In the hope that we can resolve these problems soon, for now this package instead contains another copy of the *unsigned* shim on arm64 to maintain package dependencies.
その他の shim-signed 関連パッケージ
|
|
|
|
-
- dep: grub-efi-arm64-bin
- GRand Unified Bootloader, version 2 (ARM64 UEFI modules)
-
- dep: grub2-common (>= 2.06-3~deb10u3)
- GRand Unified Bootloader (バージョン 2 に共通のファイル群)
-
- dep: shim-helpers-arm64-signed (>= 1+15.4+2~deb10u1)
- boot loader to chain-load signed boot loaders (signed by Debian)
-
- dep: shim-signed-common (>= 1.39~1+deb10u1+15.7-1~deb10u1)
- Secure Boot chain-loading bootloader (common helper scripts)
-
- rec: secureboot-db
- パッケージは利用できません