import shim-unsigned-x64-15.4-4.el8_1

SOURCES/sbat.redhat.csv

-shim.redhat,1,Red Hat,shim,15.4-4,secalert@redhat.com

SOURCES/sbat.rocky.csv

+shim.rocky,1,Rocky Linux,shim,15.4-4,security@rockylinux.org

SPECS/shim-unsigned-x64.spec

@@ -26,13 +26,13 @@ ExclusiveArch:        x86_64
 License:              BSD
 URL:                  https://github.com/rhboot/shim
 Source0:              https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
-Source1:              rocky-root-ca.der
 %if 0%{?dbxfile}
 Source2:              %{dbxfile}
 %endif
-Source3:              sbat.redhat.csv
 
 Source100:            shim-find-debuginfo.sh
+Source90000:          sbat.rocky.csv
+Source90001:          rocky-root-ca.der
 
 Patch0001:            0001-Fix-a-broken-file-header-on-ia32.patch
 
@@ -99,7 +99,7 @@ git config --unset user.email
 git config --unset user.name
 mkdir build-%{efiarch}
 mkdir build-%{efialtarch}
-cp %{SOURCE3} data/
+cp %{SOURCE90000} data/
 
 %build
 COMMITID=$(cat commit)
@@ -107,8 +107,8 @@ MAKEFLAGS="TOPDIR=.. -f ../Makefile COMMITID=${COMMITID} "
 MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
 MAKEFLAGS+="ENABLE_SHIM_HASH=true "
 MAKEFLAGS+="%{_smp_mflags}"
-if [ -f "%{SOURCE1}" ]; then
-	MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1}"
+if [ -f "%{SOURCE90001}" ]; then
+	MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE90001}"
 fi
 %if 0%{?dbxfile}
 if [ -f "%{SOURCE2}" ]; then
@@ -134,8 +134,8 @@ COMMITID=$(cat commit)
 MAKEFLAGS="TOPDIR=.. -f ../Makefile COMMITID=${COMMITID} "
 MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
 MAKEFLAGS+="ENABLE_SHIM_HASH=true "
-if [ -f "%{SOURCE1}" ]; then
-	MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1}"
+if [ -f "%{SOURCE90001}" ]; then
+	MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE90001}"
 fi
 %if 0%{?dbxfile}
 if [ -f "%{SOURCE2}" ]; then