%undefine _hardened_build

%global tarversion 2.02~beta2

%undefine _missing_build_ids_terminate_build

Name:           grub2

Epoch:          1

Version:        2.02

Release:        0.87%{?dist}%{?buildid}

Summary:        Bootloader with support for Linux, Multiboot and more

Group:          System Environment/Base

License:        GPLv3+

URL:            http://www.gnu.org/software/grub/

Source0:        ftp://alpha.gnu.org/gnu/grub/grub-%{tarversion}.tar.xz

#Source0:	ftp://ftp.gnu.org/gnu/grub/grub-%%{tarversion}.tar.xz

Source1:	grub.macros

Source2:	grub.patches

Source3:	http://unifoundry.com/unifont-5.1.20080820.pcf.gz

Source4:	gitignore

Source5:	redhatsecurebootca3.cer

Source6:	redhatsecureboot301.cer

Source7:	redhatsecurebootca5.cer

Source8:	redhatsecureboot502.cer

%include %{SOURCE1}

# generate with do-rebase

%include %{SOURCE2}

BuildRequires:  flex bison binutils python

BuildRequires:  ncurses-devel xz-devel bzip2-devel

BuildRequires:  freetype-devel libusb-devel

BuildRequires:	rpm-devel rpm-libs

%ifarch %{sparc} aarch64 ppc64le

# sparc builds need 64 bit glibc-devel - also for 32 bit userland

BuildRequires:  /usr/lib64/crt1.o glibc-static glibc-devel

%else

%ifarch x86_64

BuildRequires:  /usr/lib64/crt1.o glibc-static(x86-64) glibc-devel(x86-64)

%else

# ppc64 builds need the ppc crt1.o

BuildRequires:  /usr/lib/crt1.o glibc-static glibc-devel

%endif

%endif

BuildRequires:  autoconf automake autogen device-mapper-devel

BuildRequires:	freetype-devel gettext-devel git

BuildRequires:	texinfo

BuildRequires:	dejavu-sans-fonts

BuildRequires:	help2man

%ifarch %{efi_arch}

BuildRequires:	pesign >= 0.99-8

%endif

%if %{?_with_ccache: 1}%{?!_with_ccache: 0}

BuildRequires:  ccache

%endif

ExcludeArch:	s390 s390x %{arm} %{?ix86}

Obsoletes:	%{name} <= %{flagday}

%if 0%{with_legacy_arch}

Requires:	%{name}-%{legacy_package_arch} = %{evr}

%else

Requires:	%{name}-%{package_arch} = %{evr}

%endif

%global desc \

The GRand Unified Bootloader (GRUB) is a highly configurable and \

customizable bootloader with modular architecture.  It supports a rich \

variety of kernel formats, file systems, computer architectures and \

hardware devices.\

%{nil}

%description

%{desc}

%ifarch x86_64

%package common

Summary:	grub2 common layout

Group:		System Environment/Base

BuildArch:	noarch

%description common

This package provides some directories which are required by various grub2

subpackages.

%endif

%package tools

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Obsoletes:	%{name}-tools <= %{flagday}

%ifarch x86_64

Obsoletes:	%{name}-tools-efi <= %{flagday}

Provides:	%{name}-tools-efi = %{evr}

%endif

Requires:	%{name}-tools-minimal = %{evr}

Requires:	%{name}-common = %{evr}

Requires:	gettext os-prober which file

Requires(pre):  dracut

Requires(post): dracut

%description tools

%{desc}

This subpackage provides tools for support of all platforms.

%package tools-minimal

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Requires:	gettext

Requires:	%{name}-common = %{evr}

Obsoletes:	%{name}-tools <= %{flagday}

%description tools-minimal

%{desc}

This subpackage provides tools for support of all platforms.

%package tools-extra

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Requires:	gettext os-prober which file

Requires:	%{name}-tools-minimal = %{epoch}:%{version}-%{release}

Requires:	%{name}-common = %{epoch}:%{version}-%{release}

Requires:	%{name}-tools = %{evr}

Obsoletes:	%{name}-tools <= %{flagday}

%description tools-extra

%{desc}

This subpackage provides tools for support of all platforms.

%if 0%{with_efi_arch}

%define_efi_variant %{package_arch} -p

%endif

%if 0%{with_alt_efi_arch}

%define_efi_variant %{alt_package_arch}

%endif

%if 0%{with_legacy_arch}

%define_legacy_variant %{legacy_package_arch}

%endif

%prep

%setup -T -c -n grub-%{tarversion}

%do_common_setup

%if 0%{with_efi_arch}

%do_setup %{grubefiarch}

%endif

%if 0%{with_alt_efi_arch}

%do_setup %{grubaltefiarch}

%endif

%if 0%{with_legacy_arch}%{with_legacy_utils}

%do_setup %{grublegacyarch}

%endif

%build

%if 0%{with_efi_arch}

%do_primary_efi_build %{grubefiarch} %{grubefiname} %{grubeficdname} %{_target_platform} "'%{efi_cflags}'" %{SOURCE5} %{SOURCE6} redhatsecureboot301 %{SOURCE7} %{SOURCE8} redhatsecureboot502

%endif

%if 0%{with_alt_efi_arch}

%do_alt_efi_build %{grubaltefiarch} %{grubaltefiname} %{grubalteficdname} %{_alt_target_platform} "'%{alt_efi_cflags}'" %{SOURCE5} %{SOURCE6} redhatsecureboot301 %{SOURCE7} %{SOURCE8} redhatsecureboot502

%endif

%if 0%{with_legacy_arch}%{with_legacy_utils}

%do_legacy_build %{grublegacyarch}

%endif

%do_common_build

%install

set -e

rm -fr $RPM_BUILD_ROOT

%do_common_install

%if 0%{with_efi_arch}

%do_efi_install %{grubefiarch} %{grubefiname} %{grubeficdname}

%endif

%if 0%{with_alt_efi_arch}

%do_alt_efi_install %{grubaltefiarch} %{grubaltefiname} %{grubalteficdname}

%endif

%if 0%{with_legacy_arch}%{with_legacy_utils}

%do_legacy_install %{grublegacyarch} %{alt_grub_target_name}

%endif

${RPM_BUILD_ROOT}/%{_bindir}/%{name}-editenv ${RPM_BUILD_ROOT}/boot/efi/EFI/%{efidir}/grubenv create

rm -f $RPM_BUILD_ROOT%{_infodir}/dir

%find_lang grub

# Make selinux happy with exec stack binaries.

mkdir ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/

cat << EOF > ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/grub2.conf

# these have execstack, and break under selinux

-b /usr/bin/grub2-script-check

-b /usr/bin/grub2-mkrelpath

-b /usr/bin/grub2-fstest

-b /usr/sbin/grub2-bios-setup

-b /usr/sbin/grub2-probe

-b /usr/sbin/grub2-sparc64-setup

EOF

# Don't run debuginfo on all the grub modules and whatnot; it just

# rejects them, complains, and slows down extraction.

%global finddebugroot "%{_builddir}/%{?buildsubdir}/debug"

%global dip RPM_BUILD_ROOT=%{finddebugroot} %{__debug_install_post}

%define __debug_install_post (						\

	mkdir -p %{finddebugroot}/usr					\

	mv ${RPM_BUILD_ROOT}/usr/bin %{finddebugroot}/usr/bin		\

	mv ${RPM_BUILD_ROOT}/usr/sbin %{finddebugroot}/usr/sbin		\

	%{dip}								\

	install -m 0755 -d %{buildroot}/usr/lib/ %{buildroot}/usr/src/	\

	cp -al %{finddebugroot}/usr/lib/debug/				\\\

		%{buildroot}/usr/lib/debug/				\

	cp -al %{finddebugroot}/usr/src/debug/				\\\

		%{buildroot}/usr/src/debug/ )				\

	mv %{finddebugroot}/usr/bin %{buildroot}/usr/bin		\

	mv %{finddebugroot}/usr/sbin %{buildroot}/usr/sbin		\

	%{nil}

%clean    

rm -rf $RPM_BUILD_ROOT

%pre tools

if [ -f /boot/grub2/user.cfg ]; then

    if grep -q '^GRUB_PASSWORD=' /boot/grub2/user.cfg ; then

	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' /boot/grub2/user.cfg

    fi

elif [ -f /boot/efi/EFI/%{efidir}/user.cfg ]; then

    if grep -q '^GRUB_PASSWORD=' /boot/efi/EFI/%{efidir}/user.cfg ; then

	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' \

	    /boot/efi/EFI/%{efidir}/user.cfg

    fi

elif [ -f /etc/grub.d/01_users ] && \

	grep -q '^password_pbkdf2 root' /etc/grub.d/01_users ; then

    if [ -f /boot/efi/EFI/%{efidir}/grub.cfg ]; then

	# on EFI we don't get permissions on the file, but

	# the directory is protected.

	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \

		sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \

	    > /boot/efi/EFI/%{efidir}/user.cfg

    fi

    if [ -f /boot/grub2/grub.cfg ]; then

	install -m 0600 /dev/null /boot/grub2/user.cfg

	chmod 0600 /boot/grub2/user.cfg

	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \

		sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \

	    > /boot/grub2/user.cfg

    fi

fi

if [ -f /boot/grub2/grubenv ] && ! [ -f /boot/efi/EFI/%{efidir}/grubenv ] ; then

	if [ -e /boot/efi/EFI/%{efidir}/grubenv ] ; then

		rm /boot/efi/EFI/%{efidir}/grubenv

		mv /boot/grub2/grubenv /boot/efi/EFI/%{efidir}/grubenv

		ln -sf ../efi/EFI/%{efidir}/grubenv /boot/grub2/grubenv

	fi

fi

%post tools

if [ "$1" = 1 ]; then

	/sbin/install-info --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz || :

	/sbin/install-info --info-dir=%{_infodir} %{_infodir}/%{name}-dev.info.gz || :

fi

%triggerun -- grub2 < 1:1.99-4

# grub2 < 1.99-4 removed a number of essential files in postun. To fix upgrades

# from the affected grub2 packages, we first back up the files in triggerun and

# later restore them in triggerpostun.

# https://bugzilla.redhat.com/show_bug.cgi?id=735259

# Back up the files before uninstalling old grub2

mkdir -p /boot/grub2.tmp &&

mv -f /boot/grub2/*.mod \

      /boot/grub2/*.img \

      /boot/grub2/*.lst \

      /boot/grub2/device.map \

      /boot/grub2.tmp/ || :

%triggerpostun -- grub2 < 1:1.99-4

# ... and restore the files.

test ! -f /boot/grub2/device.map &&

test -d /boot/grub2.tmp &&

mv -f /boot/grub2.tmp/*.mod \

      /boot/grub2.tmp/*.img \

      /boot/grub2.tmp/*.lst \

      /boot/grub2.tmp/device.map \

      /boot/grub2/ &&

rm -r /boot/grub2.tmp/ || :

%preun tools

if [ "$1" = 0 ]; then

	/sbin/install-info --delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz || :

	/sbin/install-info --delete --info-dir=%{_infodir} %{_infodir}/%{name}-dev.info.gz || :

fi

%files

%ifnarch x86_64 %{ix86}

%exclude %{_bindir}/%{name}-render-label

%exclude %{_sbindir}/%{name}-bios-setup

%exclude %{_sbindir}/%{name}-macbless

%endif

%ifnarch x86_64

%exclude /boot/grub2/grubenv

%exclude /boot/efi/EFI/*/grubenv

%exclude %{_datadir}/locale

%endif

%ifarch x86_64

%files common -f grub.lang

%dir %{_libdir}/grub/

%dir %{_datarootdir}/grub/

%dir %{_datarootdir}/grub/themes/

%exclude %{_datarootdir}/grub/themes/*

%attr(0700,root,root) %dir %{_sysconfdir}/grub.d

%dir %{_datarootdir}/grub

%exclude %{_datarootdir}/grub/*

%dir /boot/%{name}

%dir /boot/%{name}/themes/

%dir /boot/%{name}/themes/system

%exclude /boot/%{name}/themes/system/*

%attr(0700,root,root) %dir /boot/grub2

%exclude /boot/grub2/*

%dir %verify(not mtime) %attr(0700,root,root)/boot/efi/EFI/%{efidir}

%exclude /boot/efi/EFI/%{efidir}/*

%license %{common_srcdir}/COPYING

%ghost %config(noreplace) /boot/grub2/grubenv

%doc %{common_srcdir}/INSTALL

%doc %{common_srcdir}/NEWS

%doc %{common_srcdir}/README

%doc %{common_srcdir}/THANKS

%doc %{common_srcdir}/TODO

%doc %{common_srcdir}/docs/grub.html

%doc %{common_srcdir}/docs/grub-dev.html

%doc %{common_srcdir}/docs/font_char_metrics.png

%endif

%files tools-minimal

%defattr(-,root,root,-)

%{_sysconfdir}/prelink.conf.d/grub2.conf

%{_sbindir}/%{name}-get-kernel-settings

%{_sbindir}/%{name}-set-default

%{_sbindir}/%{name}-setpassword

%{_bindir}/%{name}-editenv

%{_bindir}/%{name}-mkpasswd-pbkdf2

%{_datadir}/man/man3/%{name}-get-kernel-settings*

%{_datadir}/man/man8/%{name}-set-default*

%{_datadir}/man/man8/%{name}-setpassword*

%{_datadir}/man/man1/%{name}-editenv*

%{_datadir}/man/man1/%{name}-mkpasswd-*

%files tools

%defattr(-,root,root,-)

%attr(0644,root,root) %ghost %config(noreplace) %{_sysconfdir}/default/grub

%config %{_sysconfdir}/grub.d/??_*

%{_sysconfdir}/grub.d/README

%{_infodir}/%{name}*

%{_datarootdir}/grub/*

%exclude %{_datarootdir}/grub/themes

%exclude %{_datarootdir}/grub/*.h

%{_datarootdir}/bash-completion/completions/grub

%{_sbindir}/%{name}-install

%{_sbindir}/%{name}-mkconfig

%{_sbindir}/%{name}-probe

%{_sbindir}/%{name}-rpm-sort

%{_sbindir}/%{name}-reboot

%{_bindir}/%{name}-file

%{_bindir}/%{name}-menulst2cfg

%{_bindir}/%{name}-mkrelpath

%{_bindir}/%{name}-script-check

%{_datadir}/man/man?/*

# exclude man pages from tools-extra

%exclude %{_datadir}/man/man8/%{name}-sparc64-setup*

%exclude %{_datadir}/man/man8/%{name}-install*

%exclude %{_datadir}/man/man1/%{name}-fstest*

%exclude %{_datadir}/man/man1/%{name}-glue-efi*

%exclude %{_datadir}/man/man1/%{name}-kbdcomp*

%exclude %{_datadir}/man/man1/%{name}-mkfont*

%exclude %{_datadir}/man/man1/%{name}-mkimage*

%exclude %{_datadir}/man/man1/%{name}-mklayout*

%exclude %{_datadir}/man/man1/%{name}-mknetdir*

%exclude %{_datadir}/man/man1/%{name}-mkrescue*

%exclude %{_datadir}/man/man1/%{name}-mkstandalone*

%exclude %{_datadir}/man/man1/%{name}-syslinux2cfg*

# exclude man pages from tools-minimal

%exclude %{_datadir}/man/man3/%{name}-get-kernel-settings*

%exclude %{_datadir}/man/man8/%{name}-set-default*

%exclude %{_datadir}/man/man8/%{name}-setpassword*

%exclude %{_datadir}/man/man1/%{name}-editenv*

%exclude %{_datadir}/man/man1/%{name}-mkpasswd-*

%ifarch x86_64 %{?ix86}

%{_sbindir}/%{name}-macbless

%{_bindir}/%{name}-render-label

%{_datadir}/man/man8/%{name}-macbless*

%{_datadir}/man/man1/%{name}-render-label*

%else

%exclude %{_sbindir}/%{name}-macbless

%exclude %{_bindir}/%{name}-render-label

%exclude %{_datadir}/man/man8/%{name}-macbless*

%exclude %{_datadir}/man/man1/%{name}-render-label*

%endif

%if %{with_legacy_utils}

%{_sbindir}/%{name}-install

%ifarch %{ix86} x86_64

%{_sbindir}/%{name}-bios-setup

%else

%exclude %{_sbindir}/%{name}-bios-setup

%exclude %{_datadir}/man/man8/%{name}-bios-setup*

%endif

%ifarch %{sparc}

%{_sbindir}/%{name}-sparc64-setup

%else

%exclude %{_sbindir}/%{name}-sparc64-setup

%exclude %{_datadir}/man/man8/%{name}-sparc64-setup*

%endif

%ifarch %{sparc} ppc ppc64 ppc64le

%{_sbindir}/%{name}-ofpathname

%else

%exclude %{_sbindir}/%{name}-ofpathname

%exclude %{_datadir}/man/man8/%{name}-ofpathname*

%endif

%endif

%files tools-extra

%{_sbindir}/%{name}-sparc64-setup

%{_sbindir}/%{name}-ofpathname

%{_bindir}/%{name}-fstest

%{_bindir}/%{name}-glue-efi

%{_bindir}/%{name}-kbdcomp

%{_bindir}/%{name}-mkfont

%{_bindir}/%{name}-mkimage

%{_bindir}/%{name}-mklayout

%{_bindir}/%{name}-mknetdir

%ifnarch %{sparc}

%{_bindir}/%{name}-mkrescue

%endif

%{_bindir}/%{name}-mkstandalone

%{_bindir}/%{name}-syslinux2cfg

%{_sysconfdir}/sysconfig/grub

%{_datadir}/man/man8/%{name}-sparc64-setup*

%{_datadir}/man/man8/%{name}-install*

%{_datadir}/man/man1/%{name}-fstest*

%{_datadir}/man/man1/%{name}-glue-efi*

%{_datadir}/man/man1/%{name}-kbdcomp*

%{_datadir}/man/man1/%{name}-mkfont*

%{_datadir}/man/man1/%{name}-mkimage*

%{_datadir}/man/man1/%{name}-mklayout*

%{_datadir}/man/man1/%{name}-mknetdir*

%{_datadir}/man/man1/%{name}-mkrescue*

%{_datadir}/man/man1/%{name}-mkstandalone*

%{_datadir}/man/man8/%{name}-ofpathname*

%{_datadir}/man/man1/%{name}-syslinux2cfg*

%exclude %{_datarootdir}/grub/themes/starfield

%if 0%{with_efi_arch}

%define_efi_variant_files %{package_arch} %{grubefiname} %{grubeficdname} %{grubefiarch} %{target_cpu_name} %{grub_target_name}

%endif

%if 0%{with_alt_efi_arch}

%define_efi_variant_files %{alt_package_arch} %{grubaltefiname} %{grubalteficdname} %{grubaltefiarch} %{alt_target_cpu_name} %{alt_grub_target_name}

%endif

%if 0%{with_legacy_arch}

%define_legacy_variant_files %{legacy_package_arch} %{grublegacyarch}

%else

%if 0%{with_legacy_utils}

%exclude %{_sysconfdir}/%{name}.cfg

%exclude %{_libdir}/grub/%{grublegacyarch}/*

%exclude %{_libdir}/grub/%{grublegacyarch}/

%endif

%endif

%changelog

* Mon Aug 24 2020 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87

- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB

  Resolves: rhbz#1869987

* Mon Jul 27 2020 Peter Jones <pjones@redhat.com> - 2.02-0.86

- Fix a mis-merge

  Related: CVE-2020-15705

* Mon Jul 27 2020 Peter Jones <pjones@redhat.com> - 2.02-0.85

- Couple more late fixes.

  Resolves: CVE-2020-10713

  Resolves: CVE-2020-14308

  Resolves: CVE-2020-14309

  Resolves: CVE-2020-14310

  Resolves: CVE-2020-14311

  Resolves: CVE-2020-15705

* Sun Jul 26 2020 Peter Jones <pjones@redhat.com> - 2.02-0.84

- Couple more late fixes.

  Resolves: CVE-2020-10713

  Resolves: CVE-2020-14308

  Resolves: CVE-2020-14309

  Resolves: CVE-2020-14310

  Resolves: CVE-2020-14311

* Mon Jul 20 2020 Peter Jones <pjones@redhat.com> - 2.02-0.83

- Fix several CVEs:

  Resolves: CVE-2020-10713

  Resolves: CVE-2020-14308

  Resolves: CVE-2020-14309

  Resolves: CVE-2020-14310

  Resolves: CVE-2020-14311

* Mon Mar 23 2020 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82

- Prepend prefix when HTTP path is relative

- efi/http: Export {fw,http}_path variables to make them global

  Resolves: rhbz#1616395

- efi/http: Enclose literal IPv6 addresses in square brackets

- efi/net: Allow to specify a port number in addresses

- efi/ip4_config: Improve check to detect literal IPv6 addresses

- efi/net: Print a debug message if parsing the address fails

  Resolves: rhbz#1732765

* Fri Sep 13 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81

- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64

  Resolves: rhbz#1748019

* Wed Mar 27 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80

- Rebuild with correct build target for signing

  Resolves: rhbz#1693213

* Tue Mar 26 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79

- Ignore the modification time when doing RPM verification of /boot/efi files

  Resolves: rhbz#1496952

* Wed Mar 20 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78

- Prevent errors from diskfilter scan of removable drives

  Resolves: rhbz#1446418

- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file

  Resolves: rhbz#1497918

- Remove glibc32 and glibc-static(x86-32) BuildRequires

  Resolves: rhbz#1614259

* Thu Oct 25 2018 Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.77

- Re-enable regexp module

  Resolves: rhbz#1630678

* Mon Jul 30 2018 pjones <pjones@redhat.com> - 2.02.0.76

- Fix PCIe probing in EFI UGA driver.

  Resolves: rhbz#1583708

* Wed Jul 18 2018 Peter Jones <pjones@redhat.com> - 2.02-0.74

- Fix symlink issues with grubenv

  Resolves: rhbz#1602773

  Related: rhbz#1497918

- Make the common subpackage only build on x86_64 to avoid timestamp

  mismatches.

  Related: rhbz#1602773

  Related: rhbz#1497918

* Fri Jun 29 2018 Peter Jones <pjones@redhat.com> - 2.02-0.73

- Fix loading grub modules with no symbols defined.

  Related: rhbz#1490981

* Thu Jun 28 2018 Peter Jones <pjones@redhat.com> - 2.02-0.72

- Revert module dir fix; it still doesn't work.

  Resolves: rhbz#1594703

* Mon Jun 25 2018 Peter Jones <pjones@redhat.com> - 2.02-0.71

- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,

  so one more build to avoid the regression.

  Related: rhbz#1340893

* Mon Jun 25 2018 Peter Jones <pjones@redhat.com> 2.02-0.70

- ... and once more, because I built for the wrong target.

  Related: rhbz#1340893

* Mon Jun 25 2018 Peter Jones <pjones@redhat.com> - 2.02-0.69

- Build utilities on i686 as well, so grubby can build-dep it there.

  Related: rhbz#1340893

* Fri Jun 22 2018 Peter Jones <pjones@redhat.com> - 2.02-0.68

- More work on /boot/efi/... permissions

  Resolves: rhbz#1496952

- Rework grubenv symlinks and handle them on upgrades

  Resolves: rhbz#1497918

- Make grub2-setpassword -o work

  Resolves: rhbz#1512749

* Thu Jun 21 2018 Peter Jones <pjones@redhat.com> - 2.02-0.67

- Make the permissions on /boot/efi/... match the filesystem's requirements.

  Resolves: rhbz#1496952

* Thu Jun 21 2018 Peter Jones <pjones@redhat.com> - 2.02-0.66

- Fix EFI UGA driver when the framebuffer is above 4G

  Resolves: rhbz#1457988

- Handle XFS filesystems with sparse inodes

  Resolves: rhbz#1402716

- Support HTTP booting

  Resolves: rhbz#1490981

* Mon Oct 09 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65.el7_4.2

- Fix an incorrect man page exclusion on x86_64.

* Fri Oct 06 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65.1

- More precise requires and obsoletes on the -tools* subpackages to avoid

  issues with mixing and matching repos the subpackages are split between.

* Fri Sep 22 2017 Peter Jones <pjones@redhat.com> - 2.02-0.65

- Fix spurious : at the end of the mac address netboot paths.

  Resolves: rhbz#1483740

* Wed May 31 2017 Peter Jones <pjones@redhat.com> - 2.02-0.64

- Revert pkglibdir usage; we have to coordinate this with Lorax.

  Related: rhbz#1455243

* Tue May 30 2017 pjones <pjones@redhat.com> - 2.02-0.63

- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.

  Related: rhbz#1455243

* Tue May 30 2017 Peter Jones <pjones@redhat.com> - 2.02-0.62

- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.

  Related: rhbz#1455243

* Wed May 24 2017 Peter Jones <pjones@redhat.com> - 2.02-0.61

- Fix some minor ia32 booting bugs

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

- Add support for non-Ethernet network cards

  Related: rhbz#1232432

- Add support for http booting

  Resolves: rhbz#1232432

- Fix efi module subpackage obsoletes/provides

  Resolves: rhbz#1447723

- Make ppc modules subpackages use different directories on the filesystem.

  Resolves: rhbz#1455243

* Thu Apr 20 2017 Peter Jones <pjones@redhat.com> - 2.02-0.60

- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it

  exists.  This is also why the bug we fixed in 0.59 showed up at all.

  Resolves: rhbz#1443809

  Resolves: rhbz#1442970

- Fix a regexp problem where rpm spec parser un-escapes things that

  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/

  to fail.

  Related: rhbz#1443809

* Wed Apr 19 2017 Peter Jones <pjones@redhat.com> - 2.02-0.59

- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder

  Resolves: rhbz#1442970

* Wed Apr 19 2017 Peter Jones <pjones@redhat.com> - 2.02-0.58

- Add Aarch64 FDT #address-cells and #size-cells support

  Resolves: rhbz#1436745

- Fix ppc64 "grub2.chrp" to be "grub.chrp"

  Resolves: rhbz#1442970

* Wed Apr 12 2017 Peter Jones <pjones@redhat.com> - 2.02-0.57

- Make "grub2" require the grub2-efi-... package on arches where there's no

  legacy build.

  Related: rhbz#1440787

* Tue Apr 11 2017 Peter Jones <pjones@redhat.com> - 2.02-0.56

- Rebuild in the right build root.

  Related: rhbz#1437450

* Tue Apr 11 2017 Peter Jones <pjones@redhat.com> - 2.02-0.55

- Make a "grub2" top-level package to help solve Jira RCM-14929.

  Related: rhbz#1437450

* Mon Apr 10 2017 Peter Jones <pjones@redhat.com> - 2.02-0.54

- Make grub2-pc, grub2-ppc64le, etc, also have an Obsoletes for the old grub2

  packages.  Hoping this will solve Jira RCM-14929.

  Related: rhbz#1437450

* Thu Mar 30 2017 Peter Jones <pjones@redhat.com> - 2.02-0.53

- Don't manually put an arch in a requires.

  The automatically generated provides won't have it, and all of the

  tools display the packages as if it were there, so you can't ever see

  that they never match up. Meanwhile the auto generator *will* add

  $name($arch)=$evr provides, which aren't quite the same.  We probably

  don't need it anyway.  Maybe.

  Resolves: rhbz#1437450

* Thu Mar 30 2017 Peter Jones <pjones@redhat.com> - 2.02-0.52

- Fix our debuginfo filter to not accidentally discard the stripped versions of

  userland binaries.

  Related: rhbz#1310763

* Tue Mar 28 2017 Peter Jones <pjones@redhat.com> - 2.02-0.51

- Also be sure to pull in grub2-tools-extras for now, to make upgrades work.

  Related: rhbz#1310763

* Tue Mar 28 2017 Peter Jones <pjones@redhat.com> - 2.02-0.50

- Fix where the grub2-ofpathname man page lands

  Related: rhbz#1310763

- Fix stripping of userland binaries

  Related: rhbz#1310763

* Tue Mar 21 2017 Peter Jones <pjones@redhat.com> - 2.02-0.49

- Include unicode.pf2 in the grub-efi-ARCH-cdboot images

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

* Tue Mar 21 2017 Peter Jones <pjones@redhat.com> - 2.02-0.48

- grub2-efi-* don't actually need to require grub2-tools-efi (i.e. the mac

  tools), anaconda and lorax can know how to do that.

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

* Mon Mar 20 2017 Peter Jones <pjones@redhat.com> - 2.02-0.47

- Fix ia32 booting.

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

* Fri Mar 17 2017 Peter Jones <pjones@redhat.com> - 2.02-0.46

- Fix ppc* package names.

  Related: rhbz#1310763

  Related: rhbz#1411748

  Related: rhbz#1300009

* Wed Mar 15 2017 Peter Jones <pjones@redhat.com> - 2.02-0.45

- Rework package to make multi-arch EFI easier.

  Resolves: rhbz#1310763

  Related: rhbz#1411748

- Honor IO alignment on EFI systems

  Resolves: rhbz#1300009