Lennart Poettering
4b840414be
cryptenroll/repart/creds: no longer default to binding against literal PCR 7
...
PCR 7 covers the SecureBoot policy, in particular "dbx", i.e. the
denylist of bad actors. That list is pretty much as frequently updated
as firmware these days (as fwupd took over automatic updating). This
means literal PCR 7 policies are problematic: they likely break soon,
and are as brittle as any other literal PCR policies.
hence, pick safer defaults, i.e. exclude PCR 7 from the default mask.
This means the mask is now empty.
Generally, people should really switch to signed PCR policies covering
PCR 11, in combination with systemd-pcrlock for the other PCRs.
2025-01-30 10:32:26 +01:00
..
2025-01-23 21:28:02 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-10-29 16:50:06 +01:00
2024-11-05 22:57:51 +01:00
2024-10-30 12:38:27 +00:00
2024-12-11 11:14:37 +09:00
2024-12-25 17:24:38 +01:00
2024-11-07 16:55:53 +01:00
2024-11-26 12:26:10 +01:00
2024-12-25 17:00:31 +01:00
2024-11-24 01:11:42 +09:00
2025-01-19 04:37:14 +09:00
2024-12-25 17:00:31 +01:00
2025-01-24 14:54:37 +01:00
2024-12-25 17:24:38 +01:00
2024-08-21 15:17:02 +02:00
2024-11-05 22:57:51 +01:00
2024-11-26 17:28:14 +01:00
2024-10-01 11:16:14 +02:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2025-01-21 04:12:18 +09:00
2024-12-25 17:24:38 +01:00
2024-11-11 20:31:08 +01:00
2024-11-08 14:14:36 +01:00
2024-08-21 15:17:02 +02:00
2024-12-25 17:24:38 +01:00
2024-08-21 15:17:02 +02:00
2024-12-25 17:00:31 +01:00
2024-07-13 18:00:16 +02:00
2025-01-28 03:28:26 +09:00
2024-12-25 17:24:38 +01:00
2024-12-30 10:27:39 +09:00
2024-08-22 04:26:32 +09:00
2025-01-29 04:28:10 +09:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:00:31 +01:00
2024-10-16 20:12:38 -07:00
2024-12-25 17:00:31 +01:00
2024-11-11 20:31:08 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:00:31 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:24:38 +01:00
2025-01-15 21:05:06 +01:00
2024-12-25 17:00:31 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-11-26 17:28:14 +01:00
2025-01-15 17:03:21 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2025-01-27 10:09:08 +01:00
2025-01-15 17:03:21 +01:00
2024-12-25 17:24:38 +01:00
2024-12-11 18:32:46 +01:00
2024-12-25 17:24:38 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:00:31 +01:00
2024-10-01 15:55:28 +02:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-11-11 20:31:08 +01:00
2024-09-06 14:10:12 +02:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-11-11 20:31:08 +01:00
2024-11-05 19:32:19 +00:00
2024-09-12 16:18:07 +02:00
2024-12-25 17:00:31 +01:00
2024-11-11 20:31:08 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-11-07 18:51:21 +09:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-05 19:32:19 +00:00
2024-10-10 19:02:53 +09:00
2024-10-10 19:02:53 +09:00
2024-12-25 17:24:38 +01:00
2024-10-10 19:02:53 +09:00
2024-10-10 19:02:53 +09:00
2024-12-25 17:24:38 +01:00
2024-11-08 14:14:36 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2025-01-23 21:27:39 +01:00
2024-12-25 17:00:31 +01:00
2025-01-22 21:41:44 +01:00
2024-11-05 22:57:51 +01:00
2025-01-15 17:03:21 +01:00
2025-01-23 21:28:02 +01:00
2024-11-05 22:57:51 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:00:31 +01:00
2024-11-06 19:06:47 +09:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2025-01-28 03:28:26 +09:00
2024-12-25 17:24:38 +01:00
2025-01-11 13:12:39 +01:00
2024-11-07 18:51:21 +09:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-09-11 15:00:34 +02:00
2024-12-19 15:38:56 +01:00
2025-01-30 10:32:26 +01:00
2025-01-30 10:32:26 +01:00
2024-11-24 01:11:42 +09:00
2025-01-02 14:59:00 +01:00
2025-01-15 13:51:12 +09:00
2025-01-14 11:13:25 +01:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-03 19:36:41 +01:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:24:38 +01:00
2024-11-05 22:57:51 +01:00
2024-09-13 12:32:42 +02:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-12 17:54:07 +09:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2024-11-24 01:11:42 +09:00
2024-11-11 20:31:08 +01:00
2025-01-21 00:07:58 +00:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-25 17:00:31 +01:00
2025-01-28 08:49:49 -05:00
2024-11-05 22:57:51 +01:00
2025-01-14 21:07:06 +00:00
2025-01-23 21:48:02 +01:00
2024-11-05 22:57:51 +01:00
2025-01-14 14:42:23 +01:00
2024-07-28 10:33:49 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-05 22:57:51 +01:00
2024-11-24 01:11:42 +09:00
2024-11-05 22:57:51 +01:00
2025-01-03 21:14:47 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-26 17:28:14 +01:00
2024-11-11 20:31:08 +01:00
2025-01-23 02:08:32 -05:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-10-18 17:58:47 -04:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:00:31 +01:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2025-01-21 04:12:18 +09:00
2024-10-24 10:07:28 +02:00
2024-10-24 09:54:48 +02:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2025-01-20 21:51:40 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-06-20 00:10:12 +09:00
2025-01-09 03:49:29 +09:00
2025-01-15 21:05:06 +01:00
2024-12-25 17:00:31 +01:00
2025-01-28 10:38:01 +01:00
2025-01-28 12:22:26 +01:00
2024-08-22 22:20:42 +02:00
2024-12-25 17:00:31 +01:00
2024-11-05 22:57:51 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2025-01-19 11:47:09 +09:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2025-01-23 18:14:47 +09:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-25 17:24:38 +01:00
2024-12-19 12:39:32 +01:00
2024-10-29 11:00:13 +01:00
2024-12-25 17:00:31 +01:00
2024-08-21 15:17:02 +02:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:24:38 +01:00
2025-01-19 04:37:14 +09:00
2024-11-06 19:06:40 +09:00
2025-01-19 03:09:06 +09:00
2025-01-23 22:23:45 +09:00
2024-12-30 09:14:29 +09:00
2025-01-05 09:40:05 +05:30
2025-01-28 17:20:46 +00:00
2024-10-04 12:45:21 +01:00
2024-10-31 21:08:08 +00:00
2025-01-23 22:36:39 +01:00
2025-01-08 21:41:03 +01:00
2024-12-25 17:24:39 +01:00
2024-12-25 17:00:31 +01:00
2024-11-18 15:18:26 +09:00
2025-01-19 04:37:14 +09:00