Add SBAT information to Linux kernel

Vitaly Kuznetsovrequested to merge
vkuznets/kernel-ark:sbat_vmlinuz into os-build

Recent versions of shim (e.g. 15.8) refuse to boot UEFI binaries with no SBAT information issuing "Security Policy Violation" error. While this does not yet affect tradition 'shim -> grub -> kernel' and 'shim -> UKI(sd-boot) -> kernel' chains (as both shim and sd-stub have SBAT), direct loading of kernel from shim may also come handy in certain cases. Also, grub may also refuse to boot Linux kernel without SBAT at some point.

Signed-off-by: Vitaly Kuznetsov vkuznets@redhat.com

Edited by Vitaly Kuznetsov

Merge request reports