mirror of
https://github.com/systemd/systemd.git
synced 2026-07-19 22:10:56 +00:00
19bf12bff3
This creates a chicken-and-egg problem: we stuff the pcrlock policy into a credential in the ESP, but credentials get measured into PCR 12, hence PCR 12 is both input and output of the pcrlock logic, which makes impossible to calculate. Let's drop PCR 12 for now. (We might want to pass the policy some other way one day, to avoid this, but that's something for another day.) Note that this still allows locking to PCR12 if people want to (for example because they don't need this for the rootfs, and hence need no cred passing via the ESP), this hence only changes the default, nothing more. Fixes: #33546