mokutil-0.7.2-160000.2.2

- update to 0.7.2:
  * mokutil: revert the default listing to the verbose form
- update to 0.7.1:
  * Fix an off-by-one reading passwords from a file.
  * Short certificate listing by default

- Update to 0.7.0
    + 82694cb Show usage instead of aborting on bad flags
    + 04791c2 mokutil bugfix: del unused opt "-s"
    + d978c18 Fix leak of list in delete_data_from_req_var()
    + e498f64 Fix leak of fd in mok_get_variable()
    + 7b6258a Show the key owner GUID
    + 51b5e55 Use PKG_PROG_PKG_CONFIG macro from pkg.m4 to detect pkg-config
    + 1aefcdb mokutil: handle the parsing error from "mok-variables"
    + 71140ef mokutil: Fix memory leak in export_db_keys
    + 0011d52 mokutil:check the result of malloc() is necessary
    + a0d8702 Fix inconsistency in skip messages
    + ae59d89 man: add "--trust-mok" and "--untrust-mok"
    + dd55c28 Avoid conflicting efi_char16_t type definitions
    + 8b6d116 fix: typo "accesss" -> "access"
    + f68a4f4 Do not exit with non zero status for version query
    + 5f49730 Check for efi variabales support after processing commands
    + 2d6c409 Return 0 after printing help messages
    + c64741d Add support for SSPPolicy, depricate --set-sbat-policy delete
    + 48e3d2a Fix tab alignment for help (set-fallback-verbosity/set-fallback-noreboot)
    + c361087 (HEAD -> master, tag: 0.7.0, origin/ssppolicy-v2-fix, origin/master, origin/HEAD) Rename "previous" revocations to "automatic"

- Use %patch -P N instead of deprecated %patchN.

- Sync change log to prepare for sending mokutil 0.6.0 to SLE15-SP6
  (jsc#PED-6528)
  - Removed the following backported patches because they are merged
    to 0.6.0:
  - mokutil-fix-missing-header.patch
  b15e7c4d7 util: add the missing stdio.h
  - mokutil-enable-setting-fallback-verbosity-and-norebo.patch (bsc#1198458)
  57bc38582 mokutil: enable setting fallback verbosity and noreboot mode
  - mokutil-SBAT-revocation-update-support.patch (bsc#1198458)
  6c9890730 SBAT revocation update support

- Remove modhash (bsc#1214358)
  + The modhash script is rarely used and it's impractical to block
    a kernel module with the hash.

- Update to 0.6.0
    + 6c98907 SBAT revocation update support
    + 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys
    + 57bc385 mokutil: enable setting fallback verbosity and noreboot mode
    + b15e7c4 util: add the missing stdio.h
- Drop mokutil-fix-missing-header.patch (upstream)

- Update to 0.5.0
  + mokutil: delete key/hash from the reverse request
  + efi_x509: fix an error handling in is_immediate_ca()
  + efi_x509: fix certificates fingerprint calculation
  + efi_x509: use EVP_Digest()* functions instead of the deprecated
    SHA1_*()
  + src/util.c: fix NULL pointer dereference in mok_get_variable
  + mokutil: Read the SbatLevelRT variable to get the SBAT entries
  + mokutil: add mok-variables parsing support
  + mokutil: Add option to print the UEFI SBAT variable content
  + mokutil: only check for Secure Boot support in options that
    need it
  + efi_x509: add the function to fetch SKID
  + keyring: add the function to check kernel keyring
  + mokutil: initialize data for efi_get_variable()
  + mokutil: correct the data for efi_set_variable() in
    set_password()
  + mokutil: improve the readability of issue_mok_request()
  + mokutil: drop the checks for PK and KEK
  + mokutil: check the blocklists before enrolling a key
  + mokutil: adjust the command bits
  + mokutil: remove "--simple-hash"
  + make CA check non-fatal
  + mokutil: close file in the error path
  + mokutil: do the CA check
  + efi_x509: add the function to check immediate CA
  + efi_x509: use d2i_X509() to create X509 handling
  + mokutil: rename hash_file as pw_hash_file
  + password-crypt: update the function names
  + password-crypt: fix the types of several functions
  + mokutil: fix the error message in sb_state()
  + mokutil: move x509 functions to efi_x509.c
  + mokutil: move the hash functions to efi_hash.c
  + util: add functions for db_var_name and db_friendly_name
  + Remove the SHA1 code from identify_hash_type()
  + Map the UEFI variable names with a function
  + Fix -Wcast-align warnings
  + Fix 32 bit build
  + Add --timeout to manpage and other corrections.
  + mokutil.c: fix typo enrollement -> enrollment
  + Avoid taking pointer to packed struct
  + Fix name of --enable-validation in the description
  + Remove shebang from bash-completion/mokutil
- Add mokutil-fix-missing-header.patch to fix the compilation error
  due to the missing header
- Refresh mokutil-remove-libkeyutils-check.patch and only apply
  it to openSUSE Leap 15.*
- Drop upstreamed patches:
  + mokutil-remove-shebang-from-bash-completion-file.patch
  + mokutil-bsc1173115-add-ca-and-keyring-checks.patch
- Drop mokutil-support-revoke-builtin-cert.patch since we don't use
  the builtin cert prompt patch in shim anymore.

- spec file cleanup

- Add mokutil-bsc1173115-add-ca-and-keyring-checks.patch to add
  options for CA and kernel keyring checks (bsc#1173115)
  + Add new BuildRequires: keyutils-devel
  + Add mokutil-remove-libkeyutils-check.patch to disable the
    version check of libkeyutils
- Refresh mokutil-support-revoke-builtin-cert.patch

- Update mokutil-support-revoke-builtin-cert.patch
  + Add "--revoke-cert" to the man page