From f5f26332fa5a8502f6c1305c5a63174449bf5887 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 31 Oct 2025 17:56:41 +0100 Subject: [PATCH] catalog: improve PCR extended catalog entry --- catalog/systemd.catalog.in | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/catalog/systemd.catalog.in b/catalog/systemd.catalog.in index f7ef980962e..cb1142b1940 100644 --- a/catalog/systemd.catalog.in +++ b/catalog/systemd.catalog.in @@ -734,10 +734,14 @@ Support: %SUPPORT_URL% The Trusted Platform Module's (TPM) Platform Configuration Register (PCR) @PCR@, on banks @BANKS@, has been extended with the string '@MEASURING@'. -Whenever the system transitions to a new runtime phase, the specified PCR is -extended with a different string, to ensure that security policies for -TPM-bound secrets and other resources are limited to specific phases of the -runtime. +System state, configuration and properties are cryptographically measured into +the security chip in an irreversible way to provide local and remote +attestation of system state and identity. + +For example, whenever the system transitions to a new runtime phase, the +PCRs ares extended with a different string, to ensure that security +policies for TPM-bound secrets and other resources are limited to specific +phases of the runtime. -- f9b0be465ad540d0850ad32172d57c21 Subject: Memory Trimmed -- 2.47.3