Lennart Poettering
19a783f4dd
This automatically measures the IMDS 'userdata' into PCR 12, i.e. where we measure the other owner-supplied configuration, such as confexts and credentials and similar. (Why 12? It's really about who owns the data and what it is for. PCRs/NvPCRs are scarce hence there's a strong incentive to not go overboard with new allocations, and IMDS userdata in purpose and owner is very very similar to confexts and credentials, hence let's reuse the PCR for this purpose.)
14 lines
626 B
C
14 lines
626 B
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
#pragma once
|
|
|
|
#include <sys/uio.h>
|
|
|
|
int pcrextend_file_system_word(const char *path, char **ret, char **ret_normalized_path);
|
|
int pcrextend_machine_id_word(char **ret);
|
|
int pcrextend_product_id_word(char **ret);
|
|
int pcrextend_verity_word(const char *name, const struct iovec *root_hash, const struct iovec *root_hash_sig, char **ret);
|
|
int pcrextend_imds_userdata_word(const struct iovec *data, char **ret);
|
|
|
|
int pcrextend_verity_now(const char *name, const struct iovec *root_hash, const struct iovec *root_hash_sig);
|
|
int pcrextend_imds_userdata_now(const struct iovec *data);
|