-0.10.3 (?/??/2016):
+0.10.3 (4/24/2016):
-------------------
+- Altered RPM & Debian installation scripts so as to NOT call sbsign if
+ Secure Boot is disabled. This is a response to Ubuntu bug #1574372
+ (https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372): In
+ Ubuntu 16.04, the sbsign program is segfaulting randomly, which prevents
+ proper installation of the program. This change at least permits proper
+ installation IF Secure Boot is disabled.
+
+- Changed description of BIOS/CSM/legacy OS loaders on Macs to include the
+ string "(Legacy)", so as to more easily identify BIOS/CSM/legacy-mode OSes
+ in the rEFInd main menu.
+
+- Added recognition of the fwupx64.efi file as a firmware update tool.
+ This filename is excluded from the first-row launchers, and is instead
+ presented on the second row, controlled by the "fwupdate" item on the
+ "showtools" option line. It's enabled by default. Note that it's still a
+ bit unclear to me how this tool is supposed to be used. rEFInd launches it
+ with no options, but if it should take options, this will have to be
+ changed in the future.
+
+- Tightened exclusion of shell binary filenames from boot loader scan.
+ Previously, any filename containing the substring "shell" was excluded
+ from scans. Now it's tighter; only files matching one of the filenames in
+ the constant SHELL_NAMES in main.c are excluded. This change will enable
+ programs with names that include "shell", but that aren't in rEFInd's
+ SHELL_NAMES list, such as "shelly.efi", to be shown in the rEFInd main
+ menu.
+
+- Fixed bug in NTFS driver that caused it to hang (and thus hang the
+ computer) in some situations, particularly when a file on an NTFS volume
+ had many fragments and when the computer's CSM was activated. (Fix
+ courtesy of "S L.")
+
+- Modified SIP/CSR rotation code: If the csr-active-config EFI variable is
+ missing AND the firmware is Apple (as identified by the string "Apple"
+ being present in the ST->FirmwareVendor string), rEFInd treats the
+ computer as one on which SIP is available and set to the "enabled" state
+ (0x10). The upshot is that the SIP/CSR tool will appear if the showtools
+ and csr_values options are set appropriately in refind.conf, even if the
+ csr-active-config variable is missing from the NVRAM. The point of this
+ change is that I've received reports of some Macs that run OS X 10.11 but
+ that lack this variable. OS X acts as if SIP were enabled, but rEFInd is
+ then unable to disable SIP. This change gives rEFInd the ability to
+ disable SIP on such systems. The drawback is that the variable might be
+ set on some systems that don't run OS X 10.11. This should be harmless
+ from a technical point of view, but the presence of SIP indicators in
+ rEFInd could be confusing.
+
- Added refind-mkdefault script to simplify resetting rEFInd as the default
boot program in Linux. The intent is to run this after GRUB, Windows, OS
X, or some other tool takes over as the primary boot manager. It can be