]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
man: update example in systemd-measure.xml (#35506)
authorcvlc12 <97767846+cvlc12@users.noreply.github.com>
Wed, 11 Dec 2024 21:09:11 +0000 (22:09 +0100)
committerLuca Boccassi <luca.boccassi@gmail.com>
Thu, 12 Dec 2024 16:33:57 +0000 (16:33 +0000)
In the example from systemd-measure(1), do not bind to PCR 7 in
addition to the PCR policy.

As long as this is still done by default, see #35280.

(cherry picked from commit 693038fce47a819c5eebeb4fce39c9ac991acf84)

man/systemd-measure.xml

index 5d697dd62f5b0ee04ab152bbcc319b61d480764c..368c94f7005435919dc04e3a898027de2a3f1685 100644 (file)
@@ -328,6 +328,7 @@ $ ukify build \
      <programlisting># systemd-cryptenroll --tpm2-device=auto \
      --tpm2-public-key=tpm2-pcr-public-key.pem \
      --tpm2-signature=tpm2-pcr-signature.json \
+     --tpm2-pcrs="" \
      /dev/sda5</programlisting>
 
      <para>And then unlock the device with the signature:</para>