Luca Boccassi 548f87538a measure: expose offline signing data in policy-digest output ...

The PolicyPCR digest is not always the complete input to an offline
signature. PolicyAuthorize also includes the hashed policy reference.
This is now required for NVPCRs to work in the initrd.

Expose the complete data as "tbs" (to-be-signed) and use it when ukify
matches offline signatures. Keep "pol" as the compatibility fallback.

Fixes: https://github.com/systemd/systemd/issues/43635

Follow-up for f0f3687700

2026-09-07 16:15:42 +01:00

..

auxv

…

dmidecode-dumps

…

fuzz

fuzz: add a fuzzer for the qcow2 converter

2026-09-01 11:41:19 -04:00

hwdb.d

…

integration-tests

test-bpf-restrict-fsaccess: add W^X and ptrace protection tests

2026-08-31 23:33:40 +02:00

journal-data

…

knot-data

resolvectl: support JSON output for openpgp and tlsa

2026-08-04 08:08:33 +09:00

test-bcd

…

test-cgroup-mask

…

test-engine

…

test-execute

various: mark files with the usual license tags

2026-08-28 06:26:09 +09:00

test-fstab-generator

…

test-journals

…

test-keymap-util

…

test-network

network: register already enslaved interfaces when their master appears (#43557)

2026-09-01 18:28:43 +09:00

test-network-generator-conversion

…

test-path

…

test-path-util

…

test-resolve

…

test-sched-prio

…

test-sysusers

various: mark files with the usual license tags

2026-08-28 06:26:09 +09:00

test-umount

…

units

measure: expose offline signing data in policy-digest output

2026-09-07 16:15:42 +01:00

.gitignore

…

create-sys-script.py

create-sys-script: apply "ruff format" and "ruff check --fix"

2026-05-18 02:44:46 +09:00

hwdb-test.sh

…

integration-test-setup.sh

tests: avoid apt-get asking for user input

2025-07-16 02:05:41 +01:00

meson.build

test: split out inline python script

2026-08-05 11:37:29 +09:00

networkd-test.py

…

rule-syntax-check.py

rule-syntax-check: apply "ruff format" and "ruff check --fix"

2026-05-18 02:44:46 +09:00

run-unit-tests.py

…

sd-script.py

sd-script: apply "ruff format" and "ruff check --fix"

2026-05-18 02:44:46 +09:00

sys-script.py

udev: derive path ID for PNP devices from ACPI firmware node

2026-08-03 13:54:17 +09:00

test-bootctl-json.sh

…

test-compare-versions.sh

test: quote paths to executables

2024-09-18 09:47:04 +09:00

test-dlopen-note.py

various: mark files with the usual license tags

2026-08-28 06:26:09 +09:00

test-fstab-generator.sh

…

test-link-abi.py

…

test-network-generator-conversion.sh

…

test-rpm-macros.sh

…

test-shutdown.py

…

test-systemctl-enable.sh

test: add coverage for systemctl preset in test-systemctl-enable.sh

2026-07-26 15:10:33 +09:00

test-systemd-tmpfiles.py

tmpfiles: add %D specifier resolution

2026-06-21 18:20:53 +01:00

test-sysusers.sh.in

sysusers: gracefully handle existing group in /etc/gshadow

2026-08-04 08:17:04 +09:00

test-udev.py

udev: derive path ID for PNP devices from ACPI firmware node

2026-08-03 13:54:17 +09:00

test.service.in

…

testdata

…

udev-dmi-memory-id-test.sh

…