Vitaly Kuznetsov a06992dd16 measure: make tpm_log_tagged_event() measure CC as well ...

tpm_log_tagged_event() only measures the event to the TPM while
tpm_log_ipl_event() measures the event both to the TPM and CC. Fix the
inconsistency.

Note, this is a potentially breaking change for TDX guests as systemd will
now measure more stuff to the MRTD/RTMRs, reference values for attestation may
need to be adjusted.

Found by Claude Code Review.

2026-03-18 12:35:21 +00:00

..

ac-power

…

analyze

tree-wide: suppress misc-use-internal-linkage warnings

2026-03-05 20:23:24 +01:00

ask-password

…

backlight

backlight: also change clamp percentage on ID_BACKLIGHT_CLAMP/ID_LEDS_CLAMP=yes

2026-02-16 21:24:55 +09:00

basic

sd-dlopen: make macros to generate .notes.dlopen sections public API (#41047)

2026-03-18 12:33:58 +00:00

battery-check

…

binfmt

…

bless-boot

find-esp: introduce _full() flavour of ESP/XBOOTLDR discovery functions

2026-03-18 10:25:59 +00:00

boot

measure: make tpm_log_tagged_event() measure CC as well

2026-03-18 12:35:21 +00:00

bootctl

find-esp: introduce _full() flavour of ESP/XBOOTLDR discovery functions

2026-03-18 10:25:59 +00:00

busctl

…

cgls

…

cgtop

…

core

core: limit number of LogExtraFields (#41044)

2026-03-11 19:40:43 +00:00

coredump

coredump: capture crashing thread ID and name

2026-03-18 10:27:27 +00:00

coverage

…

creds

…

cryptenroll

meson: use libfido2_cflags dependency

2026-03-12 16:02:28 +00:00

cryptsetup

meson: use libfido2_cflags dependency

2026-03-12 16:02:28 +00:00

debug-generator

…

delta

…

detect-virt

…

dissect

dissect: Go via service on ENOENT from loop_device_make() as well

2026-02-24 18:29:37 +01:00

environment-d-generator

…

escape

…

factory-reset

…

firstboot

…

fsck

…

fstab-generator

…

fundamental

tree-wide: use DIGITS and friends

2026-03-03 22:18:26 +01:00

fuzz

fuzz: fix typo

2026-03-11 03:23:53 +09:00

getty-generator

…

gpt-auto-generator

gpt-auto-generator: enable nvpcr logic by default

2026-02-17 22:00:14 +01:00

growfs

…

hibernate-resume

…

home

homed: fix copypasta in openssl calls

2026-03-13 10:23:36 +00:00

hostname

tree-wide: use ALPHANUMERICAL where appropriate

2026-03-04 07:36:10 +09:00

hwdb

…

id128

…

import

test-tar-extract: rename and add support for creating archives

2026-03-13 17:43:51 +00:00

include

include: update kernel headers from v7.0-rc1

2026-02-24 23:08:52 +09:00

integritysetup

…

journal

journalctl-filter: drop doubled newline

2026-03-05 01:01:33 +01:00

journal-remote

journal-remote: fix error number confusion

2026-03-02 23:09:53 +09:00

kernel-install

find-esp: introduce _full() flavour of ESP/XBOOTLDR discovery functions

2026-03-18 10:25:59 +00:00

keyutil

…

libc

…

libsystemd

sd-device: refuse spurious properties

2026-03-10 06:32:30 +09:00

libsystemd-network

sd-ndisc: fix address family check

2026-03-11 18:25:28 +01:00

libudev

…

locale

dlfcn-util: migrate to public SD_ELF_NOTE_DLOPEN() API

2026-03-18 10:28:11 +00:00

login

tree-wide: various fixlets suggested by Coccinelle

2026-03-05 10:27:58 +01:00

machine

machined: reject invalid class types when registering machines

2026-03-12 00:24:01 +00:00

machine-id-setup

…

measure

measure-tool: always sign with SHA256

2026-03-11 18:40:57 +00:00

modules-load

…

mount

mount: honor --timeout-idle-sec=SEC option (#41010)

2026-03-10 04:31:53 +09:00

mountfsd

xstatx_full(): add flag to acquire STATX_MNT_ID_UNIQUE if we can, with fallback.

2026-03-03 08:49:23 +01:00

mstack

mstack: parse --mkdir option

2026-02-20 16:56:16 +01:00

mute-console

mute-console: io.systemd.MuteConsole requires 'more'

2026-02-16 09:44:54 +01:00

network

network: route bound to a link requires the link is up

2026-03-09 11:46:14 +09:00

notify

…

nspawn

nspawn: normalize pivot_root paths

2026-03-12 00:24:01 +00:00

nsresourced

nsresourced: downgrade benign log message to debug

2026-03-10 18:23:14 +01:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

…

nss-systemd

nss-systemd,strv: use a common definition of a non-NULL but empty strv

2026-03-01 08:51:14 +01:00

oom

tree-wide: various fixlets suggested by Coccinelle

2026-03-05 10:27:58 +01:00

path

…

pcrextend

pcrlock: add an extra assert()

2026-03-10 12:03:17 +01:00

pcrlock

pcrlock: don't accept PCRs > 23 from firmware event log

2026-03-12 14:43:47 +01:00

portable

portable: avoid passing through ID/version fields to LogExtraFields= when they contain control characters

2026-03-12 21:53:28 +00:00

pstore

…

ptyfwd

…

quotacheck

…

random-seed

…

remount-fs

…

repart

repart: add --grain-size= option for partition alignment

2026-03-18 10:39:39 +00:00

reply-password

…

report

tree-wide: make private hash ops static

2026-03-04 14:32:15 +01:00

resolve

tree-wide: various fixlets suggested by Coccinelle

2026-03-05 10:27:58 +01:00

rfkill

…

rpm

systemctl: rename enqueue-marked-jobs to enqueue-marked

2026-03-03 15:26:45 +01:00

run

parse-argument: make parse_tristate_argument() do something useful

2026-02-20 21:20:45 +01:00

run-generator

…

sbsign

…

shared

dlfcn-util: migrate to public SD_ELF_NOTE_DLOPEN() API

2026-03-18 10:28:11 +00:00

shutdown

…

sleep

…

socket-activate

…

socket-proxy

…

ssh-generator

tree-wide: various fixlets suggested by Coccinelle

2026-03-05 10:27:58 +01:00

stdio-bridge

…

storagetm

…

sulogin-shell

…

sysctl

…

sysext

tree-wide: drop redundant check for SD_VARLINK_METHOD_MORE flag

2026-02-16 09:44:54 +01:00

system-update-generator

…

systemctl

tree-wide: various fixlets suggested by Coccinelle

2026-03-05 10:27:58 +01:00

systemd

sd-dlopen: relicense header to MIT-0

2026-03-18 10:28:11 +00:00

sysupdate

find-esp: introduce _full() flavour of ESP/XBOOTLDR discovery functions

2026-03-18 10:25:59 +00:00

sysusers

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

test

ansi-color: fix SYSTEMD_COLORS=true regression when output is piped

2026-03-18 12:03:38 +01:00

timedate

various: make bus objects static

2026-03-04 14:32:16 +01:00

timesync

timesync: actually disables built-in fallback NTP servers when an empty string is specified

2026-02-16 09:53:03 +09:00

tmpfiles

xstatx_full(): add flag to acquire STATX_MNT_ID_UNIQUE if we can, with fallback.

2026-03-03 08:49:23 +01:00

tpm2-setup

tpm2-setup: don't fail service on two more types of failures

2026-03-04 08:28:46 +01:00

tty-ask-password-agent

…

udev

udev: fix review mixup

2026-03-13 14:20:05 +00:00

ukify

ukify: default --hwids to /usr/lib/systemd/boot/hwids/<EFI_ARCH>/

2026-02-25 13:51:31 +00:00

update-done

…

update-utmp

…

user-sessions

…

userdb

userdbd: avoid sending gshadow hash to unprivileged callers via varlink

2026-02-25 02:52:37 +01:00

validatefs

…

varlinkctl

varlinkctl: add pluggable protocol support to sd-varlink

2026-02-13 19:07:20 +01:00

vconsole

…

veritysetup

veritysetup: optionally measure Verity once we activated it

2026-02-17 22:00:14 +01:00

version

…

vmspawn

various: mark arg_* as static

2026-03-04 14:32:15 +01:00

volatile-root

…

vpick

vpick: Make suffix a single string again instead of a strv

2026-02-18 23:14:11 +01:00

xdg-autostart-generator

…