ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2025-01-18 18:57:04 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Root hashes: enable even if there is no TPM

Browse Source 
This feature doesn't require a TPM.  The configuration GUI appears
either way, but the actual check was silently skipped on TPM-less
devices.  Enable it even if there is no TPM.

Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
This commit is contained in:
Jonathon Hall 2023-06-30 13:13:48 -04:00
parent 23a086dbf7
commit 09f66e93df
No known key found for this signature in database
GPG Key ID: 1E9C3CA91AE25114
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
initrd/bin/kexec-select-boot
View File

@ -393,7 +393,7 @@ while true; do
scan_options
fi
if [ "$CONFIG_TPM" = "y" -a "$CONFIG_BASIC" != "y" ]; then
if [ "$CONFIG_BASIC" != "y" ]; then
# Optionally enforce device file hashes
if [ -r "$TMP_HASH_FILE" ]; then
valid_global_hash="n"