%undefine _hardened_build

%global tarversion 2.02~beta2

%undefine _missing_build_ids_terminate_build

Name:           grub2

Epoch:          1

Version:        2.02

Release:        0.65%{?dist}%{?buildid}.2

Summary:        Bootloader with support for Linux, Multiboot and more

Group:          System Environment/Base

License:        GPLv3+

URL:            http://www.gnu.org/software/grub/

Source0:        ftp://alpha.gnu.org/gnu/grub/grub-%{tarversion}.tar.xz

#Source0:	ftp://ftp.gnu.org/gnu/grub/grub-%%{tarversion}.tar.xz

Source1:	grub.macros

Source2:	grub.patches

Source3:	centos.cer

#(source removed)

Source5:	http://unifoundry.com/unifont-5.1.20080820.pcf.gz

Source6:	gitignore

%include %{SOURCE1}

# generate with do-rebase

%include %{SOURCE2}

BuildRequires:  flex bison binutils python

BuildRequires:  ncurses-devel xz-devel bzip2-devel

BuildRequires:  freetype-devel libusb-devel

BuildRequires:	rpm-devel rpm-libs

%ifarch %{sparc} aarch64 ppc64le

# sparc builds need 64 bit glibc-devel - also for 32 bit userland

BuildRequires:  /usr/lib64/crt1.o glibc-static glibc-devel

%else

%ifarch x86_64

BuildRequires:  /usr/lib64/crt1.o glibc-static(x86-64) glibc-devel(x86-64)

# glibc32 is what will be in the buildroots, but glibc-static(x86-32) is what

# will be in an epel-7 (i.e. centos) mock root.  I think.

%if 0%{?centos}%{?mock}

BuildRequires:  /usr/lib/crt1.o glibc-static(x86-32) glibc-devel(x86-32)

%else

BuildRequires:  /usr/lib/crt1.o glibc32

%endif

%else

# ppc64 builds need the ppc crt1.o

BuildRequires:  /usr/lib/crt1.o glibc-static glibc-devel

%endif

%endif

BuildRequires:  autoconf automake autogen device-mapper-devel

BuildRequires:	freetype-devel gettext-devel git

BuildRequires:	texinfo

BuildRequires:	dejavu-sans-fonts

BuildRequires:	help2man

%ifarch %{efi_arch}

BuildRequires:	pesign >= 0.99-8

%endif

%if %{?_with_ccache: 1}%{?!_with_ccache: 0}

BuildRequires:  ccache

%endif

%if 0%{?centos}

%global efidir centos

%endif

ExcludeArch:	s390 s390x %{arm} %{?ix86}

Obsoletes:	%{name} <= %{flagday}

%if 0%{with_legacy_arch}

Requires:	%{name}-%{legacy_package_arch} = %{evr}

%else

Requires:	%{name}-%{package_arch} = %{evr}

%endif

%global desc \

The GRand Unified Bootloader (GRUB) is a highly configurable and \

customizable bootloader with modular architecture.  It supports a rich \

variety of kernel formats, file systems, computer architectures and \

hardware devices.\

%{nil}

%description

%{desc}

%package common

Summary:	grub2 common layout

Group:		System Environment/Base

BuildArch:	noarch

%description common

This package provides some directories which are required by various grub2

subpackages.

%package tools

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Obsoletes:	%{name}-tools <= %{flagday}

Obsoletes:	%{name}-tools-efi <= %{flagday}

Provides:	%{name}-tools-efi = %{evr}

Requires:	%{name}-tools-minimal = %{evr}

Requires:	%{name}-common = %{evr}

Requires:	gettext os-prober which file

Requires(pre):  dracut

Requires(post): dracut

%description tools

%{desc}

This subpackage provides tools for support of all platforms.

%package tools-minimal

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Requires:	gettext

Requires:	%{name}-common = %{evr}

Obsoletes:	%{name}-tools <= %{flagday}

%description tools-minimal

%{desc}

This subpackage provides tools for support of all platforms.

%package tools-extra

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Requires:	gettext os-prober which file

Requires:	%{name}-tools-minimal = %{epoch}:%{version}-%{release}

Requires:	%{name}-common = %{epoch}:%{version}-%{release}

Requires:	%{name}-tools = %{evr}

Obsoletes:	%{name}-tools <= %{flagday}

%description tools-extra

%{desc}

This subpackage provides tools for support of all platforms.

%if 0%{with_efi_arch}

%define_efi_variant %{package_arch} -p

%endif

%if 0%{with_alt_efi_arch}

%define_efi_variant %{alt_package_arch}

%endif

%if 0%{with_legacy_arch}

%define_legacy_variant %{legacy_package_arch}

%endif

%prep

%setup -T -c -n grub-%{tarversion}

%do_common_setup

%if 0%{with_efi_arch}

%do_setup %{grubefiarch}

%endif

%if 0%{with_alt_efi_arch}

%do_setup %{grubaltefiarch}

%endif

%if 0%{with_legacy_arch}

%do_setup %{grublegacyarch}

%endif

%build

%if 0%{with_efi_arch}

%do_primary_efi_build %{grubefiarch} %{grubefiname} %{grubeficdname} %{_target_platform} "'%{efi_cflags}'" %{SOURCE3} %{SOURCE4} redhatsecureboot301

%endif

%if 0%{with_alt_efi_arch}

%do_alt_efi_build %{grubaltefiarch} %{grubaltefiname} %{grubalteficdname} %{_alt_target_platform} "'%{alt_efi_cflags}'" %{SOURCE3} %{SOURCE4} redhatsecureboot301

%endif

%if 0%{with_legacy_arch}

%do_legacy_build %{grublegacyarch}

%endif

%do_common_build

%install

set -e

rm -fr $RPM_BUILD_ROOT

%do_common_install

%if 0%{with_efi_arch}

%do_efi_install %{grubefiarch} %{grubefiname} %{grubeficdname}

%endif

%if 0%{with_alt_efi_arch}

%do_alt_efi_install %{grubaltefiarch} %{grubaltefiname} %{grubalteficdname}

%endif

%if 0%{with_legacy_arch}

%do_legacy_install %{grublegacyarch} %{alt_grub_target_name}

%endif

rm -f $RPM_BUILD_ROOT%{_infodir}/dir

%find_lang grub

# Make selinux happy with exec stack binaries.

mkdir ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/

cat << EOF > ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/grub2.conf

# these have execstack, and break under selinux

-b /usr/bin/grub2-script-check

-b /usr/bin/grub2-mkrelpath

-b /usr/bin/grub2-fstest

-b /usr/sbin/grub2-bios-setup

-b /usr/sbin/grub2-probe

-b /usr/sbin/grub2-sparc64-setup

EOF

# Don't run debuginfo on all the grub modules and whatnot; it just

# rejects them, complains, and slows down extraction.

%global finddebugroot "%{_builddir}/%{?buildsubdir}/debug"

%global dip RPM_BUILD_ROOT=%{finddebugroot} %{__debug_install_post}

%define __debug_install_post (						\

	mkdir -p %{finddebugroot}/usr					\

	mv ${RPM_BUILD_ROOT}/usr/bin %{finddebugroot}/usr/bin		\

	mv ${RPM_BUILD_ROOT}/usr/sbin %{finddebugroot}/usr/sbin		\

	%{dip}								\

	install -m 0755 -d %{buildroot}/usr/lib/ %{buildroot}/usr/src/	\

	cp -al %{finddebugroot}/usr/lib/debug/				\\\

		%{buildroot}/usr/lib/debug/				\

	cp -al %{finddebugroot}/usr/src/debug/				\\\

		%{buildroot}/usr/src/debug/ )				\

	mv %{finddebugroot}/usr/bin %{buildroot}/usr/bin		\

	mv %{finddebugroot}/usr/sbin %{buildroot}/usr/sbin		\

	%{nil}

%clean    

rm -rf $RPM_BUILD_ROOT

%pre tools

if [ -f /boot/grub2/user.cfg ]; then

    if grep -q '^GRUB_PASSWORD=' /boot/grub2/user.cfg ; then

	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' /boot/grub2/user.cfg

    fi

elif [ -f /boot/efi/EFI/%{efidir}/user.cfg ]; then

    if grep -q '^GRUB_PASSWORD=' /boot/efi/EFI/%{efidir}/user.cfg ; then

	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' \

	    /boot/efi/EFI/%{efidir}/user.cfg

    fi

elif [ -f /etc/grub.d/01_users ] && \

	grep -q '^password_pbkdf2 root' /etc/grub.d/01_users ; then

    if [ -f /boot/efi/EFI/%{efidir}/grub.cfg ]; then

	# on EFI we don't get permissions on the file, but

	# the directory is protected.

	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \

		sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \

	    > /boot/efi/EFI/%{efidir}/user.cfg

    fi

    if [ -f /boot/grub2/grub.cfg ]; then

	install -m 0600 /dev/null /boot/grub2/user.cfg

	chmod 0600 /boot/grub2/user.cfg

	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \

		sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \

	    > /boot/grub2/user.cfg

    fi

fi

%post tools

if [ "$1" = 1 ]; then

	/sbin/install-info --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz || :

	/sbin/install-info --info-dir=%{_infodir} %{_infodir}/%{name}-dev.info.gz || :

fi

%triggerun -- grub2 < 1:1.99-4

# grub2 < 1.99-4 removed a number of essential files in postun. To fix upgrades

# from the affected grub2 packages, we first back up the files in triggerun and

# later restore them in triggerpostun.

# https://bugzilla.redhat.com/show_bug.cgi?id=735259

# Back up the files before uninstalling old grub2

mkdir -p /boot/grub2.tmp &&

mv -f /boot/grub2/*.mod \

      /boot/grub2/*.img \

      /boot/grub2/*.lst \

      /boot/grub2/device.map \

      /boot/grub2.tmp/ || :

%triggerpostun -- grub2 < 1:1.99-4

# ... and restore the files.

test ! -f /boot/grub2/device.map &&

test -d /boot/grub2.tmp &&

mv -f /boot/grub2.tmp/*.mod \

      /boot/grub2.tmp/*.img \

      /boot/grub2.tmp/*.lst \

      /boot/grub2.tmp/device.map \

      /boot/grub2/ &&

rm -r /boot/grub2.tmp/ || :

%preun tools

if [ "$1" = 0 ]; then

	/sbin/install-info --delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz || :

	/sbin/install-info --delete --info-dir=%{_infodir} %{_infodir}/%{name}-dev.info.gz || :

fi

%files

%files common -f grub.lang

%dir %{_libdir}/grub/

%dir %{_datarootdir}/grub/

%dir %{_datarootdir}/grub/themes/

%exclude %{_datarootdir}/grub/themes/*

%attr(0700,root,root) %dir %{_sysconfdir}/grub.d

%dir %{_datarootdir}/grub

%exclude %{_datarootdir}/grub/*

%dir /boot/%{name}

%dir /boot/%{name}/themes/

%dir /boot/%{name}/themes/system

%exclude /boot/%{name}/themes/system/*

%attr(0700,root,root) %dir /boot/grub2

%exclude /boot/grub2/*

%dir %attr(0755,root,root)/boot/efi/EFI/%{efidir}

%exclude /boot/efi/EFI/%{efidir}/*

%license %{common_srcdir}/COPYING

%ghost %config(noreplace) /boot/grub2/grubenv

%doc %{common_srcdir}/INSTALL

%doc %{common_srcdir}/NEWS

%doc %{common_srcdir}/README

%doc %{common_srcdir}/THANKS

%doc %{common_srcdir}/TODO

%doc %{common_srcdir}/docs/grub.html

%doc %{common_srcdir}/docs/grub-dev.html

%doc %{common_srcdir}/docs/font_char_metrics.png

%ifnarch x86_64 %{ix86}

%exclude %{_bindir}/%{name}-render-label

%exclude %{_sbindir}/%{name}-bios-setup

%exclude %{_sbindir}/%{name}-macbless

%endif

%files tools-minimal

%defattr(-,root,root,-)

%{_sysconfdir}/prelink.conf.d/grub2.conf

%{_sbindir}/%{name}-get-kernel-settings

%{_sbindir}/%{name}-set-default

%{_sbindir}/%{name}-setpassword

%{_bindir}/%{name}-editenv

%{_bindir}/%{name}-mkpasswd-pbkdf2

%{_datadir}/man/man3/%{name}-get-kernel-settings*

%{_datadir}/man/man8/%{name}-set-default*

%{_datadir}/man/man8/%{name}-setpassword*

%{_datadir}/man/man1/%{name}-editenv*

%{_datadir}/man/man1/%{name}-mkpasswd-*

%files tools

%defattr(-,root,root,-)

%attr(0644,root,root) %ghost %config(noreplace) %{_sysconfdir}/default/grub

%config %{_sysconfdir}/grub.d/??_*

%{_sysconfdir}/grub.d/README

%{_infodir}/%{name}*

%{_datarootdir}/grub/*

%exclude %{_datarootdir}/grub/themes

%exclude %{_datarootdir}/grub/*.h

%{_datarootdir}/bash-completion/completions/grub

%{_sbindir}/%{name}-install

%{_sbindir}/%{name}-mkconfig

%{_sbindir}/%{name}-probe

%{_sbindir}/%{name}-rpm-sort

%{_sbindir}/%{name}-reboot

%{_bindir}/%{name}-file

%{_bindir}/%{name}-menulst2cfg

%{_bindir}/%{name}-mkrelpath

%{_bindir}/%{name}-script-check

%{_datadir}/man/man?/*

# exclude man pages from tools-extra

%exclude %{_datadir}/man/man8/%{name}-sparc64-setup*

%exclude %{_datadir}/man/man8/%{name}-install*

%exclude %{_datadir}/man/man1/%{name}-fstest*

%exclude %{_datadir}/man/man1/%{name}-glue-efi*

%exclude %{_datadir}/man/man1/%{name}-kbdcomp*

%exclude %{_datadir}/man/man1/%{name}-mkfont*

%exclude %{_datadir}/man/man1/%{name}-mkimage*

%exclude %{_datadir}/man/man1/%{name}-mklayout*

%exclude %{_datadir}/man/man1/%{name}-mknetdir*

%exclude %{_datadir}/man/man1/%{name}-mkrescue*

%exclude %{_datadir}/man/man1/%{name}-mkstandalone*

%exclude %{_datadir}/man/man1/%{name}-syslinux2cfg*

# exclude man pages from tools-minimal

%exclude %{_datadir}/man/man3/%{name}-get-kernel-settings*

%exclude %{_datadir}/man/man8/%{name}-set-default*

%exclude %{_datadir}/man/man8/%{name}-setpassword*

%exclude %{_datadir}/man/man1/%{name}-editenv*

%exclude %{_datadir}/man/man1/%{name}-mkpasswd-*

%ifarch x86_64 %{ix86}

%{_sbindir}/%{name}-macbless

%{_bindir}/%{name}-render-label

%{_datadir}/man/man8/%{name}-macbless*

%{_datadir}/man/man1/%{name}-render-label*

%else

%exclude %{_sbindir}/%{name}-macbless

%exclude %{_bindir}/%{name}-render-label

%exclude %{_datadir}/man/man8/%{name}-macbless*

%exclude %{_datadir}/man/man1/%{name}-render-label*

%endif

%if %{with_legacy_arch}

%{_sbindir}/%{name}-install

%ifarch %{ix86} x86_64

%{_sbindir}/%{name}-bios-setup

%else

%exclude %{_sbindir}/%{name}-bios-setup

%exclude %{_datadir}/man/man8/%{name}-bios-setup*

%endif

%ifarch %{sparc}

%{_sbindir}/%{name}-sparc64-setup

%else

%exclude %{_sbindir}/%{name}-sparc64-setup

%exclude %{_datadir}/man/man8/%{name}-sparc64-setup*

%endif

%ifarch %{sparc} ppc ppc64 ppc64le

%{_sbindir}/%{name}-ofpathname

%else

%exclude %{_sbindir}/%{name}-ofpathname

%exclude %{_datadir}/man/man8/%{name}-ofpathname*

%endif

%endif

%files tools-extra

%{_sbindir}/%{name}-sparc64-setup

%{_sbindir}/%{name}-ofpathname

%{_bindir}/%{name}-fstest

%{_bindir}/%{name}-glue-efi

%{_bindir}/%{name}-kbdcomp

%{_bindir}/%{name}-mkfont

%{_bindir}/%{name}-mkimage

%{_bindir}/%{name}-mklayout

%{_bindir}/%{name}-mknetdir

%ifnarch %{sparc}

%{_bindir}/%{name}-mkrescue

%endif

%{_bindir}/%{name}-mkstandalone

%{_bindir}/%{name}-syslinux2cfg

%{_sysconfdir}/sysconfig/grub

%{_datadir}/man/man8/%{name}-sparc64-setup*

%{_datadir}/man/man8/%{name}-install*

%{_datadir}/man/man1/%{name}-fstest*

%{_datadir}/man/man1/%{name}-glue-efi*

%{_datadir}/man/man1/%{name}-kbdcomp*

%{_datadir}/man/man1/%{name}-mkfont*

%{_datadir}/man/man1/%{name}-mkimage*

%{_datadir}/man/man1/%{name}-mklayout*

%{_datadir}/man/man1/%{name}-mknetdir*

%{_datadir}/man/man1/%{name}-mkrescue*

%{_datadir}/man/man1/%{name}-mkstandalone*

%{_datadir}/man/man8/%{name}-ofpathname*

%{_datadir}/man/man1/%{name}-syslinux2cfg*

%exclude %{_datarootdir}/grub/themes/starfield

%if 0%{with_efi_arch}

%define_efi_variant_files %{package_arch} %{grubefiname} %{grubeficdname} %{grubefiarch} %{target_cpu_name} %{grub_target_name}

%endif

%if 0%{with_alt_efi_arch}

%define_efi_variant_files %{alt_package_arch} %{grubaltefiname} %{grubalteficdname} %{grubaltefiarch} %{alt_target_cpu_name} %{alt_grub_target_name}

%endif

%if 0%{with_legacy_arch}

%define_legacy_variant_files %{legacy_package_arch} %{grublegacyarch}

%endif

%changelog

* Thu Oct 19 2017 CentOS Sources <bugs@centos.org> - 2.02-0.65.el7.centos.2

- Roll in CentOS Secureboot keys

- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos

* Mon Oct 09 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65.el7_4.2

- Fix an incorrect man page exclusion on x86_64.

  Related: rhbz#1499669

* Fri Oct 06 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65.1

- More precise requires and obsoletes on the -tools* subpackages to avoid

  issues with mixing and matching repos the subpackages are split between.

  Resolves: rhbz#1499669

* Tue Oct 03 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65

- Fix spurious : at the end of the mac address netboot paths.

  Resolves: rhbz#1497323

* Wed May 31 2017 Peter Jones <pjones@redhat.com> - 2.02-0.64

- Revert pkglibdir usage; we have to coordinate this with Lorax.

  Related: rhbz#1455243

* Tue May 30 2017 pjones <pjones@redhat.com> - 2.02-0.63

- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.

  Related: rhbz#1455243

* Tue May 30 2017 Peter Jones <pjones@redhat.com> - 2.02-0.62

- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.

  Related: rhbz#1455243

* Wed May 24 2017 Peter Jones <pjones@redhat.com> - 2.02-0.61

- Fix some minor ia32 booting bugs

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

- Add support for non-Ethernet network cards

  Related: rhbz#1232432

- Add support for http booting

  Resolves: rhbz#1232432

- Fix efi module subpackage obsoletes/provides

  Resolves: rhbz#1447723

- Make ppc modules subpackages use different directories on the filesystem.

  Resolves: rhbz#1455243

* Thu Apr 20 2017 Peter Jones <pjones@redhat.com> - 2.02-0.60

- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it

  exists.  This is also why the bug we fixed in 0.59 showed up at all.

  Resolves: rhbz#1443809

  Resolves: rhbz#1442970

- Fix a regexp problem where rpm spec parser un-escapes things that

  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/

  to fail.

  Related: rhbz#1443809

* Wed Apr 19 2017 Peter Jones <pjones@redhat.com> - 2.02-0.59

- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder

  Resolves: rhbz#1442970

* Wed Apr 19 2017 Peter Jones <pjones@redhat.com> - 2.02-0.58

- Add Aarch64 FDT #address-cells and #size-cells support

  Resolves: rhbz#1436745

- Fix ppc64 "grub2.chrp" to be "grub.chrp"

  Resolves: rhbz#1442970

* Wed Apr 12 2017 Peter Jones <pjones@redhat.com> - 2.02-0.57

- Make "grub2" require the grub2-efi-... package on arches where there's no

  legacy build.

  Related: rhbz#1440787

* Tue Apr 11 2017 Peter Jones <pjones@redhat.com> - 2.02-0.56

- Rebuild in the right build root.

  Related: rhbz#1437450

* Tue Apr 11 2017 Peter Jones <pjones@redhat.com> - 2.02-0.55

- Make a "grub2" top-level package to help solve Jira RCM-14929.

  Related: rhbz#1437450

* Mon Apr 10 2017 Peter Jones <pjones@redhat.com> - 2.02-0.54

- Make grub2-pc, grub2-ppc64le, etc, also have an Obsoletes for the old grub2

  packages.  Hoping this will solve Jira RCM-14929.

  Related: rhbz#1437450

* Thu Mar 30 2017 Peter Jones <pjones@redhat.com> - 2.02-0.53

- Don't manually put an arch in a requires.

  The automatically generated provides won't have it, and all of the

  tools display the packages as if it were there, so you can't ever see

  that they never match up. Meanwhile the auto generator *will* add

  $name($arch)=$evr provides, which aren't quite the same.  We probably

  don't need it anyway.  Maybe.

  Resolves: rhbz#1437450

* Thu Mar 30 2017 Peter Jones <pjones@redhat.com> - 2.02-0.52

- Fix our debuginfo filter to not accidentally discard the stripped versions of

  userland binaries.

  Related: rhbz#1310763

* Tue Mar 28 2017 Peter Jones <pjones@redhat.com> - 2.02-0.51

- Also be sure to pull in grub2-tools-extras for now, to make upgrades work.

  Related: rhbz#1310763

* Tue Mar 28 2017 Peter Jones <pjones@redhat.com> - 2.02-0.50

- Fix where the grub2-ofpathname man page lands

  Related: rhbz#1310763

- Fix stripping of userland binaries

  Related: rhbz#1310763

* Tue Mar 21 2017 Peter Jones <pjones@redhat.com> - 2.02-0.49

- Include unicode.pf2 in the grub-efi-ARCH-cdboot images

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

* Tue Mar 21 2017 Peter Jones <pjones@redhat.com> - 2.02-0.48

- grub2-efi-* don't actually need to require grub2-tools-efi (i.e. the mac

  tools), anaconda and lorax can know how to do that.

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

* Mon Mar 20 2017 Peter Jones <pjones@redhat.com> - 2.02-0.47

- Fix ia32 booting.

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

* Fri Mar 17 2017 Peter Jones <pjones@redhat.com> - 2.02-0.46

- Fix ppc* package names.

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

* Wed Mar 15 2017 Peter Jones <pjones@redhat.com> - 2.02-0.45

- Rework package to make multi-arch EFI easier.

  Resolves: rhbz#1310763

  Related: rhbz#1411748

- Honor IO alignment on EFI systems

  Resolves: rhbz#1300009

* Mon Aug 29 2016 Peter Jones <pjones@redhat.com> - 2.02-0.44

- Work around tftp servers that don't work with multiple consecutive slashes in

  file paths.

  Resolves: rhbz#1217243

* Thu Aug 25 2016 Peter Jones <pjones@redhat.com> - 2.02-0.42

- Make grub2-mkconfig export grub2-get-kernel-settings variables correctly.

  Related: rhbz#1226325

* Tue Aug 23 2016 Peter Jones <pjones@redhat.com> - 2.02-0.42

- Rebuild in the right build root.  Again.

  Related: rhbz#1273974

* Wed Jul 13 2016 Peter Jones <pjones@redhat.com> - 2.02-0.41

- Build with coverity patch I missed last time.

  Related: rhbz#1226325

* Wed Jul 13 2016 rmarshall@redhat.com - 2.02-0.40

- Build with coverity patches.

  Related: rhbz#1226325

* Wed Jul 13 2016 Peter Jones <pjones@redhat.com>

- Remove our patch to force a paricular uefi network interface

  Related: rhbz#1273974

  Related: rhbz#1277599

  Related: rhbz#1298765

- Update some more coverity issues

  Related: rhbz#1226325

  Related: rhbz#1154226

* Mon Jul 11 2016 rmarshall@redhat.com - 2.02-0.39

- Fix all issues discovered during coverity scan. 

  Related: rhbz#1154226

- Fix a couple compiler and CLANG issues discovered during coverity scan.

  Related: rhbz#1154226

- Fix the last few CLANG issues and a deadcode issue discovered by the

  coverity scan.

  Related: rhbz#1154226

* Fri Jul 01 2016 Peter Jones <pjones@redhat.com> - 2.02-0.38

- Pick the right build target.  Again.

  Related: rhbz#1226325

* Tue Jun 21 2016 rmarshall@redhat.com - 2.02-0.37

- Update fix for rhbz#1212114 to reflect the move to handling this case

  in anaconda.

  Related: rhbz#1315468

  Resolves: rhbz#1261926

- Add grub2-get-kernel-settings to allow grub2-mkconfig to take grubby

  configuration changes into account.

  Resolves: rhbz#1226325

* Fri Jun 17 2016 Peter Jones <pjones@redhat.com> - 2.02-0.36

- Better support for EFI network booting with dhcpv6.

  Resolves: rhbz#1154226

- Back out a duplicate change resulting in some EFI network firmware drivers

  not working properly.

  Related: rhbz#1273974

  Related: rhbz#1277599

  Related: rhbz#1298765

* Mon Jun 06 2016 Peter Jones <pjones@redhat.com> - 2.02-0.35

- Don't use legacy methods to make device node variables.

  Resolves: rhbz#1279599

- Don't pad initramfs with zeros

  Resolves: rhbz#1219864

* Thu Apr 28 2016 rmarshall@redhat.com 2.02-0.34

- Exit grub-mkconfig with a proper code when the new configuration would be

  invalid.

  Resolves: rhbz#1252311

- Warn users if grub-mkconfig needs to be run to add support for GRUB

  passwords.

  Resolves: rhbz#1290803

- Fix the information in the --help and man pages for grub-setpassword

  Resolves: rhbz#1290799

- Fix issue where shell substitution expected non-translated output when

  setting a bootloader password.

  Resolves: rhbz#1294243

- Fix an issue causing memory regions with unknown types to be marked available

  through a series of backports from upstream.

  Resolves: rhbz#1288608

* Thu Dec 10 2015 Peter Jones <pjones@redhat.com> - 2.02-0.33

- Don't remove 01_users, it's the wrong thing to do.

  Related: rhbz#1284370

* Wed Dec 09 2015 Peter Jones <pjones@redhat.com> - 2.02-0.32

- Rebuild for .z so the release number is different.

  Related: rhbz#1284370

* Wed Dec 09 2015 Peter Jones <pjones@redhat.com> - 2.02-0.31

- More work on handling of GRUB2_PASSWORD

  Resolves: rhbz#1284370

* Tue Dec 08 2015 Peter Jones <pjones@redhat.com> - 2.02-0.30

- Fix security issue when reading username and password

  Resolves: CVE-2015-8370

- Do a better job of handling GRUB_PASSWORD

  Resolves: rhbz#1284370

* Fri Oct 09 2015 Peter Jones <pjones@redhat.com> - 2.02-0.29

- Fix DHCP6 timeouts due to failed network stack once more.

  Resolves: rhbz#1267139

* Thu Sep 17 2015 Peter Jones <pjones@redhat.com> - 2.02-0.28

- Once again, rebuild for the right build target.

  Resolves: CVE-2015-5281

* Thu Sep 17 2015 Peter Jones <pjones@redhat.com> - 2.02-0.27

- Remove multiboot and multiboot2 modules from the .efi builds; they

  should never have been there.

  Resolves: CVE-2015-5281

* Mon Sep 14 2015 Peter Jones <pjones@redhat.com> - 2.02-0.26

- Be more aggressive about trying to make sure we use the configured SNP

  device in UEFI.

  Resolves: rhbz#1257475

* Wed Aug 05 2015 Robert Marshall <rmarshall@redhat.com> - 2.02-0.25

- Force file sync to disk on ppc64le machines.

  Resolves: rhbz#1212114

* Mon Aug 03 2015 Peter Jones <pjones@redhat.com> - 2.02-0.24

- Undo 0.23 and fix it a different way.

  Resolves: rhbz#1124074

* Thu Jul 30 2015 Peter Jones <pjones@redhat.com> - 2.02-0.23

- Reverse kernel sort order so they're displayed correctly.

  Resolves: rhbz#1124074