man: update example in systemd-measure.xml (#35506)

In the example from systemd-measure(1), do not bind to PCR 7 in addition to the PCR policy. As long as this is still done by default, see #35280.
2024-12-12 06:09:11 +09:00
parent 3ae314afdc
commit 693038fce4
1 changed files with 1 additions and 0 deletions
@@ -328,6 +328,7 @@ $ ukify build \
     <programlisting># systemd-cryptenroll --tpm2-device=auto \
     --tpm2-public-key=tpm2-pcr-public-key.pem \
     --tpm2-signature=tpm2-pcr-signature.json \
+     --tpm2-pcrs="" \
     /dev/sda5</programlisting>

     <para>And then unlock the device with the signature:</para>