[rpms/shim] f45: Fix /usr/lib/efi permissions and add directory installs

[rpms/shim] f45: Fix /usr/lib/efi permissions and add directory installs

[Josue Hernandez]

            A new commit has been pushed.

            Repo   : rpms/shim
            Branch : f45
            Commit : fb97e39b9403ed3e8307a6e81b2511b8ab6fddfa
            Author : Josue Hernandez <josherna@redhat.com>
            Date   : 2026-09-17T16:37:18-06:00
            Stats  : +12/-5 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/shim/c/fb97e39b9403ed3e8307a6e81b2511b8ab6fddfa?branch=f45

            Log:
            Fix /usr/lib/efi permissions and add directory installs

/usr/lib/efi folder should be 0755 with the exception of the leaf
also all the install commands are added to the install section

Signed-off-by: Josue Hernandez <josherna@redhat.com>

---
diff --git a/shim.rpmmacros b/shim.rpmmacros
index fabf9d1..79a93f8 100644
--- a/shim.rpmmacros
+++ b/shim.rpmmacros
@@ -155,10 +155,10 @@ install -m 0700 fb%{-a*}.efi						\\\
 # -A <EFIARCH>
 %define define_files(a:A:)						\
 %{expand:%%files -n shim-%{-a*}}					\
-%dir %attr(0700,root,root) %{_libdir}/efi				\
-%dir %attr(0700,root,root) %{_libdir}/efi/shim				\
-%dir %attr(0700,root,root) %{shim_vr_dir}				\
-%dir %attr(0700,root,root) %{shim_vr_dir}/EFI				\
+%dir %attr(0755,root,root) %{_libdir}/efi				\
+%dir %attr(0755,root,root) %{_libdir}/efi/shim				\
+%dir %attr(0755,root,root) %{shim_vr_dir}				\
+%dir %attr(0755,root,root) %{shim_vr_dir}/EFI				\
 %dir %attr(0700,root,root) %{shim_efi_dir}				\
 %dir %attr(0700,root,root) %{shim_boot_dir}				\
 %{shim_efi_dir}/*%{-a*}*.efi						\

diff --git a/shim.spec b/shim.spec
index 172fbde..888aa04 100644
--- a/shim.spec
+++ b/shim.spec
@@ -5,7 +5,7 @@
 
 Name:		shim
 Version:	16.1
-Release:	8%{?dist}
+Release:	9%{?dist}
 Summary:	First-stage UEFI bootloader
 License:	BSD-3-Clause
 URL:		https://github.com/rhboot/shim/
@@ -77,6 +77,10 @@ rm -rf $RPM_BUILD_ROOT
 cd shim-%{version}
 install -D -d -m 0755 $RPM_BUILD_ROOT/boot/
 install -D -d -m 0700 $RPM_BUILD_ROOT%{_prefix}/lib/shim/
+install -D -d -m 0755 $RPM_BUILD_ROOT%{_libdir}/efi
+install -D -d -m 0755 $RPM_BUILD_ROOT%{_libdir}/efi/shim
+install -D -d -m 0755 $RPM_BUILD_ROOT%{shim_vr_dir}/
+install -D -d -m 0755 $RPM_BUILD_ROOT%{shim_vr_dir}/EFI
 install -D -d -m 0700 $RPM_BUILD_ROOT%{shim_efi_dir}/
 install -D -d -m 0700 $RPM_BUILD_ROOT%{shim_boot_dir}/
 
@@ -115,6 +119,9 @@ if [[ ! -e "/run/ostree-booted" ]]; then
 fi
 
 %changelog
+* Thu Sep 17 2026 Josue Hernandez <josherna@redhat.com> - 16.1.9
+- Fix /usr/lib/efi permissions and add directory installs
+
 * Tue Sep 15 2026 Josue Hernandez <josherna@redhat.com> - 16.1-8
 - Fix /usr/lib/efi folders ownership
 - Resolves: #2528260