Dionna Amalie Glaze dbbd878340 efi: Measure into both CC and TPM if available. (#31939) ...

* efi: Measure into both CC and TPM if available.

It's possible that both measurement protocols are made available, so
instead of assuming only one or the other are available, measure into
both to avoid a problem like CVE-2021-42299.

Signed-off-by: Dionna Glaze <dionnaglaze@google.com>

2024-03-26 09:26:59 +00:00

..

efi

efi: Measure into both CC and TPM if available. (#31939)

2024-03-26 09:26:59 +00:00

bless-boot-generator.c

generator: run various generators only run on the host, not in initrd

2023-07-04 23:15:36 +02:00

bless-boot.c

path-util: introduce skip_leading_slash and use it where appropriate

2024-03-14 14:25:52 +08:00

boot-check-no-failures.c

…

bootctl-install.c

bootctl: use the full parser too

2024-03-07 19:14:36 +01:00

bootctl-install.h

…

bootctl-random-seed.c

io-util: introduce loop_write_full that takes a timeout

2023-09-07 20:30:44 +08:00

bootctl-random-seed.h

…

bootctl-reboot-to-firmware.c

bootctl: add a Varlink interface

2024-02-14 16:15:19 +01:00

bootctl-reboot-to-firmware.h

bootctl: add a Varlink interface

2024-02-14 16:15:19 +01:00

bootctl-set-efivar.c

tree-wide: fix typo

2023-10-18 12:40:25 +09:00

bootctl-set-efivar.h

…

bootctl-status.c

bootctl: add a Varlink interface

2024-02-14 16:15:19 +01:00

bootctl-status.h

bootctl: add a Varlink interface

2024-02-14 16:15:19 +01:00

bootctl-systemd-efi-options.c

bootctl: don't advertise systemd-efi-options in --help/man anymore

2023-08-09 14:25:46 +02:00

bootctl-systemd-efi-options.h

…

bootctl-uki.c

kernel-image: make inspect_kernel() optionally take directory fd

2023-04-09 07:10:20 +02:00

bootctl-uki.h

bootctl: add kernel-inspect command

2023-01-18 14:32:14 +01:00

bootctl-util.c

tree-wide: Load entry-token and layout.conf from /usr/lib/kernel/ as well

2024-01-16 14:54:04 +09:00

bootctl-util.h

tree-wide: Load entry-token and layout.conf from /usr/lib/kernel/ as well

2024-01-16 14:54:04 +09:00

bootctl.c

dissect-image: add flag for explicitly enabling userspace verity signature checking

2024-02-28 16:17:40 +01:00

bootctl.h

bootctl: add a Varlink interface

2024-02-14 16:15:19 +01:00

measure.c

measure: add support for --certificate and --private-key-source for engine/provider signing

2024-03-01 17:32:19 +00:00

meson.build

meson: Always build systemd-measure

2023-10-25 16:49:30 +02:00