]> git.ipfire.org Git - thirdparty/systemd.git/commit
pcrlock: process components outside of location window properly
authorLennart Poettering <lennart@poettering.net>
Thu, 3 Jul 2025 11:50:46 +0000 (13:50 +0200)
committerLuca Boccassi <luca.boccassi@gmail.com>
Thu, 3 Jul 2025 22:04:43 +0000 (23:04 +0100)
commit95b58ed32ea66de6a13735aad47a96bd714cb6be
tree370cae89d13d5094e033bcdb652d25feb1b7b060
parent144ea281f3ad0caa5c41892f0bdfac3d193b8e2b
pcrlock: process components outside of location window properly

So far, when we tried to match a component to eent log entries we
skipped those components if they were outside of our location window.
That however is too aggressive, since it means any components that are
already in the logs, but outside of the location window will be
considered unrecognized in the logs, and thus removed from the PCR
policy.

Change things around: always try to match up all components, regardless
if inside the location window or outside, but then make it non-fatal we
can't find a component outside of the location window.

Fixes: #36079
src/pcrlock/pcrlock.c