shim 15.8 for CentOS Stream 10

[bstinsonmhk]

Confirm the following are included in your repo, checking each box:

• [ X ] completed README.md file with the necessary information
• [ X ] shim.efi to be signed
• [ X ] public portion of your certificate(s) embedded in shim (the file passed to VENDOR_CERT_FILE)
• [ / ] binaries, for which hashes are added to vendor_db ( if you use vendor_db and have hashes allow-listed )
• [ X ] any extra patches to shim via your own git tree or as files
• [ X ] any extra patches to grub via your own git tree or as files
• [ X ] build logs
• [ X ] a Dockerfile to reproduce the build of the provided shim EFI binaries

---

What is the link to your tag in a repo cloned from rhboot/shim-review?

---

https://github.com/CentOS/shim-review/commit/9c7b0707910212c6b7225b0fcb2ed948947f463c

---

What is the SHA256 hash of your final SHIM binary?

---

1f79899df33ba605e65a2eb431cf23f48a2c3832cf2220f74eb295b469c4ba3d shimx64.efi

---

What is the link to your previous shim review request (if any, otherwise N/A)?

---

https://github.com/rhboot/shim-review/issues/399 (Abandoned)

---

If no security contacts have changed since verification, what is the link to your request, where they've been verified (if any, otherwise N/A)?

---

Contact info was verified in https://github.com/rhboot/shim-review/issues/399

---

Other Comments

---

I plan to submit a new CentOS Stream 9 review after this one. To address some of the commentary in the previous review: we don't have plans to add additional sbat entries to grub2, so the entries listed in the review represent the current state.