From: Luca Boccassi <luca.boccassi@gmail.com>
Date: Thu, 21 May 2026 20:44:42 +0000 (+0100)
Subject: boot,stub: explicitly measure select SMBIOS objects (#42233)
X-Git-Tag: v261-rc1~26
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2f2203c231e7cf12162eecffa371cc751f9275a4;p=thirdparty%2Fsystemd.git

boot,stub: explicitly measure select SMBIOS objects (#42233)

This is supposed to protect our SMBIOS type 11 importing for
credentials. Note that firmwares are supposed to measure SMBIOS anyway
to PCR 1. Alas firmware doesn't really do that in various cases. Hence
let's do so again, for select objects.

This closes a gap where some of the input for OS (i.e. system
credentials places in smbios11) isn't measured properly.

(I really want this to get into v261, because this will fuck up the PCRs
a bit more, and we already have the new separator measurement in v261,
hence there's value in getting this merged at the same time, so that we
don't break the measurements a 2nd time)
---

2f2203c231e7cf12162eecffa371cc751f9275a4