This is a request for packaging to also install the shim efi files in a /usr location which is accessible by all users. There are use cases for shimx64.efi beyond booting the machine it is installed on. Specifically serving shimx64.efi over tftp to a remote machine will make it possible to enable secure boot for baremetal provisioning in OpenStack Ironic by using (signed) grub network boot instead of iPXE. Requiring root just to copy shimx64.efi into the /tftpboot directory constrains /tftpboot population to a privileged tool. This has drawbacks, for example when the shim package is updated.
> Requiring root just to copy shimx64.efi into the /tftpboot directory constrains /tftpboot population to a privileged tool. This has drawbacks, for example when the shim package is updated. Root is not required. Just unpack the rpm cpio ball and get grubx64.efi from there.
After evaluating this issue, there are no plans to address it further or fix it in an upcoming release. Therefore, it is being closed. If plans change such that this issue will be fixed in an upcoming release, then the bug can be reopened.