From: Lennart Poettering <lennart@poettering.net>
Date: Wed, 16 Mar 2022 09:50:34 +0000 (+0100)
Subject: man: only document new PCR 12
X-Git-Tag: v251-rc1~136^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=27818e2ece12726e50cf928b4dde5762fa3e47fc;p=thirdparty%2Fsystemd.git

man: only document new PCR 12
---

diff --git a/man/systemd-cryptenroll.xml b/man/systemd-cryptenroll.xml
index d5fdb54cdd1..7c30a94ff79 100644
--- a/man/systemd-cryptenroll.xml
+++ b/man/systemd-cryptenroll.xml
@@ -214,6 +214,8 @@
           <!-- See: https://github.com/rhboot/shim/blob/main/README.tpm -->
           <!-- See: https://www.gnu.org/software/grub/manual/grub/html_node/Measured-Boot.html -->
           <!-- See: https://sourceforge.net/p/linux-ima/wiki/Home/ -->
+          <!-- See: https://github.com/tianocore-docs/edk2-TrustedBootChain/blob/main/4_Other_Trusted_Boot_Chains.md -->
+          <!-- See: https://wiki.archlinux.org/title/Trusted_Platform_Module#Accessing_PCR_registers -->
 
           <tgroup cols='2' align='left' colsep='1' rowsep='1'>
             <colspec colname="pcr" />
@@ -267,14 +269,14 @@
                 <entry>Secure boot state; changes when UEFI SecureBoot mode is enabled/disabled, or firmware certificates (PK, KEK, db, dbx, …) changes. The shim project will measure most of its (non-MOK) certificates and SBAT data into this PCR.</entry>
               </row>
 
+              <!-- Grub measures all its commands and the kernel command line into PCR 8… -->
+              <!-- Grub measures all files it reads (including kernel image, initrd, …) into PCR 9… -->
+
               <row>
-                <entry>8</entry>
+                <entry>12</entry>
                 <entry><citerefentry><refentrytitle>sd-boot</refentrytitle><manvolnum>7</manvolnum></citerefentry> measures the kernel command line into this PCR.</entry>
-                <!-- Grub measures all its commands and the kernel command line into PCR 8 too… -->
               </row>
 
-              <!-- Grub measures all files it reads (including kernel image, initrd, …) into PCR 9… -->
-
               <row>
                 <entry>10</entry>
                 <entry>The IMA project measures its runtime state into this PCR.</entry>