]> git.ipfire.org Git - thirdparty/systemd.git/commit
boot: stop making TPM PCR to measure kernel command line into configurable
authorLennart Poettering <lennart@poettering.net>
Mon, 20 Sep 2021 13:10:33 +0000 (15:10 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 23 Sep 2021 15:24:09 +0000 (17:24 +0200)
commitfaacf1807e8fcbee4bf60495e0145e4522d76393
tree9531eeda6c23b63b247db7fd4a7c8ca04e652109
parent845707aae23b3129db635604edb95c4048a5922a
boot: stop making TPM PCR to measure kernel command line into configurable

Everyone appears to use PCR 8 for this, hence I think it's safe to
hardcode that in systemd too.

It's also documented, like here:

https://www.gnu.org/software/grub/manual/grub/html_node/Measured-Boot.html

or here:

https://github.com/rhboot/shim/blob/main/README.tpm

(And the previous name was a bit confusing, since we don't actually just
measure one thing anymore, but mutliple things into multiple PCRs...)
meson.build
meson_options.txt
src/boot/efi/boot.c
src/boot/efi/meson.build
src/boot/efi/stub.c