SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update TODO

Browse Source 
Seeding RNG via SMBIOS is bad idea, since often measurement of SMBIOS
tables is used for TPM policies, under the assumption SMBIOS remains
static after a certain point.
This commit is contained in:
Lennart Poettering
2022-09-16 16:24:56 +01:00
parent c5be1ceb08
commit d52e1c81b9
1 changed files with 0 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
TODO
-5
View File
@@ -187,11 +187,6 @@ Features:
* sd-boot: include domain specific hash string in hash function for random seed
plus sizes of everything. also include DMI/SMBIOS blob
* accept a random seed via DMI/SMBIOS vendor string that is credited to the
kernel RNG, as cheap alternative to virtio-rng (problem: when credited it
must also be invalidated, question is if we can safely do that for SMBIOS
data structures)
* sd-stub: invoke random seed logic the same way as in sd-boot, except if
random seed EFI variable is already set. That way, the variable set will be
set in all cases: if you just use sd-stub, or just sd-boot, or both.