diff --git a/shim.spec b/shim.spec
index 468a4be..a9e1f2e 100644
--- a/shim.spec
+++ b/shim.spec
@@ -8,6 +8,16 @@ URL:            http://www.codon.org.uk/~mjg59/shim/
 Source0:        http://www.codon.org.uk/~mjg59/shim/shim-%{version}.tar.bz2
 Source1:	fedora-ca.cer
 
+# currently here's what's in our dbx:
+# grub2-efi-2.00-11.fc18.x86_64:
+# grubx64.efi 6ac839881e73504047c06a1aac0c4763408ecb3642783c8acf77a2d393ea5cd7
+# gcdx64.efi 065cd63bab696ad2f4732af9634d66f2c0d48f8a3134b8808750d378550be151
+# grub2-efi-2.00-11.fc19.x86_64:
+# grubx64.efi 49ece9a10a9403b32c8e0c892fd9afe24a974323c96f2cc3dd63608754bf9b45
+# gcdx64.efi 99fcaa957786c155a92b40be9c981c4e4685b8c62b408cb0f6cb2df9c30b9978
+# woops.
+Source2:	dbx.esl
+
 BuildRequires: gnu-efi git
 BuildRequires: pesign >= 0.99-8