mirror of
https://github.com/systemd/systemd.git
synced 2026-11-06 05:17:24 +00:00
If the booted UKI carries no PCR public key or no signed policy with the "initrd" reference, initialize NvPCRs in the initrd with a PolicyPCR init policy bound to the current value of PCR 11 instead of not initializing them at all. The resulting NvPCR names depend on PCR 11 and hence change with every UKI update, so this is only useful where PCR 11 can be predicted. Signed-off-by: Paul Meyer <katexochen0@gmail.com>