From: Lennart Poettering Date: Fri, 31 Oct 2025 16:56:41 +0000 (+0100) Subject: catalog: improve PCR extended catalog entry X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f5f26332fa5a8502f6c1305c5a63174449bf5887;p=thirdparty%2Fsystemd.git catalog: improve PCR extended catalog entry --- diff --git a/catalog/systemd.catalog.in b/catalog/systemd.catalog.in index f7ef980962e..cb1142b1940 100644 --- a/catalog/systemd.catalog.in +++ b/catalog/systemd.catalog.in @@ -734,10 +734,14 @@ Support: %SUPPORT_URL% The Trusted Platform Module's (TPM) Platform Configuration Register (PCR) @PCR@, on banks @BANKS@, has been extended with the string '@MEASURING@'. -Whenever the system transitions to a new runtime phase, the specified PCR is -extended with a different string, to ensure that security policies for -TPM-bound secrets and other resources are limited to specific phases of the -runtime. +System state, configuration and properties are cryptographically measured into +the security chip in an irreversible way to provide local and remote +attestation of system state and identity. + +For example, whenever the system transitions to a new runtime phase, the +PCRs ares extended with a different string, to ensure that security +policies for TPM-bound secrets and other resources are limited to specific +phases of the runtime. -- f9b0be465ad540d0850ad32172d57c21 Subject: Memory Trimmed