update TODO

This commit is contained in:
Lennart Poettering
2026-05-21 17:13:40 +02:00
committed by Luca Boccassi
parent 14a05bd208
commit 0761c9f493

View File

@@ -1226,12 +1226,6 @@ SPDX-License-Identifier: LGPL-2.1-or-later
- in pid1: include ExecStart= cmdlines (and other Exec*= cmdlines) in polkit
request, so that policies can match against command lines.
- in sd-boot and sd-stub measure the SMBIOS vendor strings to some PCR (at
least some subset of them that look like systemd stuff), because apparently
some firmware does not, but systemd honours it. avoid duplicate measurement
by sd-boot and sd-stub by adding LoaderFeatures/StubFeatures flag for this,
so that sd-stub can avoid it if sd-boot already did it.
- in sd-id128: also parse UUIDs in RFC4122 URN syntax (i.e. chop off urn:uuid: prefix)
- in sd-stub: optionally add support for a new PE section .keyring or so that
@@ -1759,8 +1753,6 @@ SPDX-License-Identifier: LGPL-2.1-or-later
- measure all log-in attempts into a new nvpcr
- measure credentials picked up from SMBIOS to some suitable PCR
- measure GPT and LUKS headers somewhere when we use them (i.e. in
systemd-gpt-auto-generator/systemd-repart and in systemd-cryptsetup?)