Files
systemd/test
Paul Meyer 7d37482ce4 tpm2-util: fall back to a PCR policy for NvPCR initialization
If the booted UKI carries no PCR public key or no signed policy with
the "initrd" reference, initialize NvPCRs in the initrd with a
PolicyPCR init policy bound to the current value of PCR 11 instead of
not initializing them at all.

The resulting NvPCR names depend on PCR 11 and hence change with every
UKI update, so this is only useful where PCR 11 can be predicted.

Signed-off-by: Paul Meyer <katexochen0@gmail.com>
2026-10-13 20:41:53 +02:00
..
…
…