From 3ba8e57b585ee1aed7a3124aa70550f2e65ddc99 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rub=C3=A9n=20Rodr=C3=ADguez?= <ruben@trisquel.info>
Date: Tue, 2 Sep 2014 17:46:36 +0200
Subject: [PATCH] Modified ubiquity to avoid signed kernels
---
helpers/make-ubiquity | 29 ++++++++++++++++++++---------
1 file changed, 20 insertions(+), 9 deletions(-)
diff --git a/helpers/make-ubiquity b/helpers/make-ubiquity
index c8fe22c0..73d544b7 100644
--- a/helpers/make-ubiquity
+++ b/helpers/make-ubiquity
@@ -17,7 +17,7 @@
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
#
-VERSION=2
+VERSION=5
. ./config
@@ -25,6 +25,10 @@ cp $DATA/trisquel_installed.png pixmaps
rm pixmaps/ubuntu_installed.png
replace ubuntu_installed trisquel_installed .
+replace linux-signed linux-lowlatency .
+replace shim-signed shim .
+replace grub-efi-amd64-signed grub-efi-amd64 .
+
/bin/sed '/canonical/d' -i debian/ubiquity.install*
rm tests/test_ubi_partman*
@@ -140,17 +144,21 @@ then
chown root:admin /target/etc/italc/keys/private/*/key
fi
-#cat << EOF > /target/etc/grub.d/01_PASSWORD
+cat << EOF > /target/etc/grub.d/01_PASSWORD
#! /bin/sh -e
-# Trisquel enables a random password to grub during install
-# Comment this file to remove the password.
-# This file should only be readable by root.
+# As a security measure Trisquel sets a password for GRUB during install.
+# It prevents unauthorized users from gaining root through the boot manager.
+# You can still edit GRUB entries by entering "grub" as user and the password
+# set below in this file. This file should only be readable by root.
+#
+# To disable the password, Comment or remove this file and run this command:
+# sudo update-grub2
-#echo set superusers=grub
-#echo password grub \$(bash -c 'echo \$RANDOM')
-#EOF
+echo set superusers=grub
+echo password grub \$(bash -c 'echo \$RANDOM')
+EOF
-#chmod 700 /target/etc/grub.d/01_PASSWORD
+chmod 700 /target/etc/grub.d/01_PASSWORD
# Hacks for accessibility
if pgrep orca > /dev/null
@@ -161,6 +169,9 @@ screen-reader-enabled=true
[org.gnome.desktop.interface]
toolkit-accessibility=true
+
+[com.canonical.unity-greeter]
+screen-reader=true
" >> /target/usr/share/glib-2.0/schemas/99_accessibility.gschema.override
chroot /target glib-compile-schemas /usr/share/glib-2.0/schemas
--
GitLab