From: Lennart Poettering Date: Fri, 14 Oct 2022 13:27:53 +0000 (+0200) Subject: man: mention that pcrphase also measures into PCR 11 X-Git-Tag: v252-rc2~28 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=346a4e3db8a7a6df32c51b48bb84ecbbd6d9bb6a;p=thirdparty%2Fsystemd.git man: mention that pcrphase also measures into PCR 11 --- diff --git a/man/systemd-cryptenroll.xml b/man/systemd-cryptenroll.xml index 7e1431a5ffa..ad338cdcc5e 100644 --- a/man/systemd-cryptenroll.xml +++ b/man/systemd-cryptenroll.xml @@ -307,7 +307,7 @@ 11 - systemd-stub7 measures the ELF kernel image, embedded initrd and other payload of the PE image it is placed in into this PCR. Unlike PCR 4 (where the same data should be measured into), this PCR value should be easy to pre-calculate, as this only contains static parts of the PE binary. Use this PCR to bind TPM policies to a specific kernel image, possibly with an embedded initrd. + systemd-stub7 measures the ELF kernel image, embedded initrd and other payload of the PE image it is placed in into this PCR. Unlike PCR 4 (where the same data should be measured into), this PCR value should be easy to pre-calculate, as this only contains static parts of the PE binary. Use this PCR to bind TPM policies to a specific kernel image, possibly with an embedded initrd. systemd-pcrphase.service8 measures boot phase strings into this PCR at various milestones of the boot process.