[22:22] <hallyn> say, i have a question, i'll probably regret asking this...  regarding https://github.com/rhboot/shim/blob/main/SBAT.md
[22:22] <hallyn> who actually writes the uefi db variable that sets the sbat versions?
[22:27] <hallyn> the doc talks about "UEFI CA releases an update" etc.  I don't know quite how to parse that.  Is it some special uefi db var that has to be signed with a key in the db ?
[23:35] <sarnold> amurray, sbeattie, any chance either of you know this? :) ^^
[23:37] <sarnold> ah, #ubuntu-devel has a bit more discussion, vorlon and jmbl know it better than I do anyway :D
[23:42] <amurray> sarnold, hallyn: sorry I am not sure
[23:43] <hallyn> amurray: sarnold - thanks - vorlon answered in #ubuntu-devel :)