From e9dbe2abc3dbef9e26e7dd4cb194b1f20e104be7 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Tue, 23 May 2023 11:02:22 +0200 Subject: [PATCH] update TODO --- TODO | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/TODO b/TODO index ee3f65e085b..f0aa26e021e 100644 --- a/TODO +++ b/TODO @@ -129,6 +129,13 @@ Deprecations and removals: Features: +* use different sbat for sd-boot and sd-stub (so that people can revoke one + without the other) + +* in ukify merge sbat info from kernel (if it has any, upstream kernels so far + dont), of sd-stub and data supplied by user. Then measure sbat too in + sd-stub, explicitly. + * open up creds for uses in generators, and document clearly that encrypted creds are only supported if strictly tpm bound, but not when using the host secret (as that is only avilable if /var/ is around. -- 2.47.3