Block Debian grub binaries with SBAT < 4

[steve-mcintyre]

(See https://bugs.debian.org/1024617)

One of the Debian builds of grub bumped the SBAT to 3, but didn't include the patches needed. Add "grub.debian,4" to block those binaries.

Signed-off-by: Steve McIntyre steve@einval.com

[Blarse]

Hi,

Wouldn't "grub.debian,2" be enough?

[Blarse]

I mean in both grub's .sbat section and shim's revocations