Lennart Poettering d70296bb56 tpm2-setup: measure information about NvPCR initialization to PCR 9 ...

This locks down NvPCR initilization a bit more: we'll measure each
initialization of an NvPCR into PCR 9, thus chaining the NvPCRs to the
PCR set. After all NvPCRs are initialized we measure a barrier into PCR
9 as well.

This ensures that later additions of NvPCRs are clearly recognizable and
distuingishable from those done at boot.

2025-11-14 22:04:58 +01:00

..

ac-power

…

analyze

tree-wide: add missing '#pragma once'

2025-11-05 05:16:34 +09:00

ask-password

…

backlight

backlight: fix typo

2025-11-03 11:07:46 +00:00

basic

log-context: Don't add log context if value is NULL

2025-11-14 11:38:59 +01:00

battery-check

…

binfmt

…

bless-boot

meson: drop libblkid dep from components not using it directly

2025-09-24 18:11:12 +02:00

boot

musl: test: several random fixlets for unit tests

2025-11-14 03:29:21 +09:00

bootctl

tree-wide: add missing '#pragma once'

2025-11-05 05:16:34 +09:00

busctl

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00

cgls

cgls: print error messages when --unit and --user-unit are used together

2025-11-05 01:38:18 +09:00

cgtop

cgtop: rename enum value to match its string repr.

2025-10-02 16:13:20 +02:00

core

core: add varlink Reload/Reexecute methods (#39561)

2025-11-15 04:17:01 +09:00

coredump

tree-wide: add several missing includes

2025-11-10 09:36:52 +09:00

coverage

…

creds

creds-util: add helper for querying system credential dirs

2025-11-02 21:14:35 +01:00

cryptenroll

pkcs11-util: drop 'sym_' prefix from cleanup functions

2025-10-25 11:15:05 +09:00

cryptsetup

cryptsetup: automatically measure used keyslot and mechanism (i.e. fido2, tpm2, pkcs11) to an NvPCR

2025-11-02 21:14:35 +01:00

debug-generator

…

delta

…

detect-virt

tree-wide: combine DUMP_STRING_TABLE() and return

2025-10-02 16:19:03 +02:00

dissect

dissect: move tar make code into tar-util.[ch] and make it generic

2025-10-29 10:09:44 +01:00

environment-d-generator

…

escape

…

factory-reset

…

firstboot

firstboot: don't talk about any 'new' installation

2025-09-26 16:40:14 +02:00

fsck

tree-wide: Remove unused includes

2025-09-19 14:46:55 +02:00

fstab-generator

mount-util: Iterate mountinfo backwards when unmounting

2025-10-29 12:01:32 +01:00

fundamental

bootctl: calculate secureboot state taking MokSBStateRT into account (#39298)

2025-11-12 08:47:44 +09:00

fuzz

Do not use "critical assert_return" in libsystemd or libudev

2025-10-22 10:10:24 +02:00

getty-generator

…

gpt-auto-generator

gpt-auto-generator: fix typo in crypttab option name

2025-11-14 03:50:15 +09:00

growfs

tree-wide: open block device locks in writable mode

2025-10-22 22:56:02 +02:00

hibernate-resume

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00

home

tree-wide: fix lseek() parameter order

2025-11-13 14:19:29 +01:00

hostname

service-util: add generic parser for runtime scope

2025-09-25 22:43:59 +02:00

hwdb

…

id128

…

import

tree-wide: fix lseek() parameter order

2025-11-13 14:19:29 +01:00

include

musl: stdio: check if stream is writable earlier in fputs() and friends

2025-11-15 05:10:33 +09:00

integritysetup

integritysetup: Add PHMAC algorithm to list of known algorithms

2025-11-13 16:14:25 +01:00

journal

journald: do not allow persistent journal storage in the initrd

2025-11-13 00:08:31 +01:00

journal-remote

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00

kernel-install

kernel-install: move staging area to /var/tmp/

2025-11-03 09:01:44 +01:00

keyutil

…

libc

musl: stdio: check if stream is writable earlier in fputs() and friends

2025-11-15 05:10:33 +09:00

libsystemd

musl: introduce two wrappers (#39700)

2025-11-15 04:18:48 +09:00

libsystemd-network

sd-dhcp-server: Add Hostname= option to static leases

2025-11-14 07:50:13 +09:00

libudev

tree-wide: drop unused libcap dependencies

2025-10-24 01:52:59 +09:00

locale

locale: use include directory for libxkbcommon

2025-10-25 13:06:02 +09:00

login

tree-wide: fix lseek() parameter order

2025-11-13 14:19:29 +01:00

machine

discover-image: introduce bus_property_get_image_is_read_only() with BUS_DEFINE_PROPERTY_GET() macro

2025-11-01 18:11:18 +09:00

machine-id-setup

…

measure

…

modules-load

modules-load: implement parallel module loading

2025-11-07 14:12:56 +01:00

mount

libmount: make dlopen() dependency

2025-09-26 08:29:37 +09:00

mountfsd

mountfsd: allow privileged users to mount bare unprotected filesystems

2025-10-22 16:47:46 +01:00

mute-console

mute-console: don't unmute twice when not running as varlink service

2025-10-07 13:38:21 +02:00

network

sd-dhcp-server: Add Hostname= option to static leases

2025-11-14 07:50:13 +09:00

notify

notify: raise log level for safe_fork()

2025-11-10 03:02:47 +01:00

nspawn

tree-wide: add missing '#pragma once'

2025-11-05 05:16:34 +09:00

nsresourced

tree-wide: add missing '#pragma once'

2025-11-05 05:16:34 +09:00

nss-myhostname

nss-myhostname: use FAMILY_ADDRESS_SIZE instead of the integer 16 when copying ip addr

2025-11-05 01:33:31 +09:00

nss-mymachines

…

nss-resolve

nss-resolve: fix the ip addr family validity check method

2025-11-06 07:45:40 +09:00

nss-systemd

nss-systemd: fix memory leak

2025-11-06 21:10:25 +01:00

oom

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00

path

systemd-path: add new type SD_PATH_SEARCH_SYSCTL

2025-11-11 19:31:16 +01:00

pcrextend

pcrextend: fix wrong format in log

2025-11-07 14:08:35 +01:00

pcrlock

tpm2-util: make tpm2_undefine_policy_nv_index() generic

2025-11-02 21:14:35 +01:00

portable

discover-image: introduce bus_property_get_image_is_read_only() with BUS_DEFINE_PROPERTY_GET() macro

2025-11-01 18:11:18 +09:00

pstore

tree-wide: drop deps on libacl

2025-09-24 09:47:30 +02:00

ptyfwd

tree-wide: add basic validation of --background argument

2025-10-25 09:56:31 +09:00

quotacheck

…

random-seed

…

rc-local-generator

…

remount-fs

libmount: make dlopen() dependency

2025-09-26 08:29:37 +09:00

repart

repart: Force --rootdir population for btrfs with compression

2025-11-07 18:17:08 +08:00

reply-password

…

resolve

resolvectl: drop an empty line between function call and error handling

2025-11-10 11:02:51 +09:00

rfkill

…

rpm

rpm: Make sure we only match files in the directories in triggers

2025-10-24 10:29:40 +09:00

run

run0: Make --same-root-dir available for run0

2025-11-14 10:36:53 +01:00

run-generator

…

sbsign

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00

shared

tpm2-setup: measure information about NvPCR initialization to PCR 9

2025-11-14 22:04:58 +01:00

shutdown

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00

sleep

…

socket-activate

tree-wide: extend $LISTEN_FDS protocol with $LISTEN_PIDFDID

2025-10-22 09:34:14 +02:00

socket-proxy

…

ssh-generator

ssh-generator: prefer using SD_JSON_BUILD_PAIR_STRING

2025-11-14 15:43:30 +01:00

stdio-bridge

stdio-bridge: remove unreachable return

2025-11-13 21:28:17 +01:00

storagetm

tree-wide: open block device locks in writable mode

2025-10-22 22:56:02 +02:00

sulogin-shell

…

sysctl

systemd-sysctl: add SD_PATH_SEARCH_SYSCTL

2025-11-12 08:49:55 +09:00

sysext

sysext: Check for /etc/initrd-release in given --root= tree

2025-11-04 22:10:50 +09:00

system-update-generator

…

systemctl

systemctl: support --global and --root in edit and cat

2025-11-11 10:00:29 -07:00

systemd

sd-event: Add exit-on-idle support

2025-11-14 11:38:56 +01:00

sysupdate

tree-wide: add missing '#pragma once'

2025-11-05 05:16:34 +09:00

sysusers

build: make libaudit dep dlopen()

2025-09-19 16:30:13 +02:00

sysv-generator

…

test

musl: stdio: check if stream is writable earlier in fputs() and friends

2025-11-15 05:10:33 +09:00

timedate

musl: time-util: introduce get_tzname() helper function

2025-11-13 03:13:55 +09:00

timesync

tree-wide: Various forward header cleanups

2025-10-17 21:11:23 +09:00

tmpfiles

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00

tpm2-setup

tpm2-setup: fix typo

2025-11-05 18:18:49 +09:00

tty-ask-password-agent

…

udev

tree-wide: fix lseek() parameter order

2025-11-13 14:19:29 +01:00

ukify

…

update-done

…

update-utmp

build: make libaudit dep dlopen()

2025-09-19 16:30:13 +02:00

user-sessions

…

userdb

userdb: prefer using SD_JSON_BUILD_PAIR_* over SD_JSON_BUILD_PAIR(

2025-11-14 15:19:57 +01:00

validatefs

libblkid: turn into dlopen() based dep

2025-09-24 18:13:10 +02:00

varlinkctl

tree-wide: extend $LISTEN_FDS protocol with $LISTEN_PIDFDID

2025-10-22 09:34:14 +02:00

vconsole

…

veritysetup

libcryptsetup: drop several unnecessary checks for existences of functions by libcryptsetyp

2025-11-02 05:49:29 +09:00

version

…

vmspawn

tree-wide: add missing '#pragma once'

2025-11-05 05:16:34 +09:00

volatile-root

…

vpick

vpick-tool: use table to parse --print=

2025-10-02 16:13:40 +02:00

xdg-autostart-generator

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00