SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

catalog: improve PCR extended catalog entry

Browse Source
This commit is contained in:
Lennart Poettering
2025-11-02 21:14:35 +01:00
parent b0c5c6aad8
commit f5f26332fa
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
catalog/systemd.catalog.in
+8 -4
View File
@@ -734,10 +734,14 @@ Support: %SUPPORT_URL%
The Trusted Platform Module's (TPM) Platform Configuration Register (PCR)
@PCR@, on banks @BANKS@, has been extended with the string '@MEASURING@'.
Whenever the system transitions to a new runtime phase, the specified PCR is
extended with a different string, to ensure that security policies for
TPM-bound secrets and other resources are limited to specific phases of the
runtime.
System state, configuration and properties are cryptographically measured into
the security chip in an irreversible way to provide local and remote
attestation of system state and identity.
For example, whenever the system transitions to a new runtime phase, the
PCRs ares extended with a different string, to ensure that security
policies for TPM-bound secrets and other resources are limited to specific
phases of the runtime.
-- f9b0be465ad540d0850ad32172d57c21
Subject: Memory Trimmed