Restricted boot: Fix wording of 'disable' prompt, does not reset TPM

This was changed to just erase the TOTP/HOTP secret, not reset the TPM.
Update the prompt.

Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
This commit is contained in:
Jonathon Hall 2023-06-30 14:31:53 -04:00
parent e0c03be341
commit 6618dd652c
No known key found for this signature in database
GPG Key ID: 1E9C3CA91AE25114

View File

@ -335,8 +335,8 @@ while true; do
if (whiptail --title 'Disable Restricted Boot Mode?' \
--yesno "This will allow booting from unsigned devices,
\nand will re-enable failsafe boot mode.
\n\nThis will also RESET the TPM and re-enable the recovery console.
\n\nProceeding will automatically update the boot firmware, reset TPM and reboot!
\n\nThis will also erase the TOTP/HOTP secret and re-enable the recovery console.
\n\nProceeding will automatically update the boot firmware and reboot!
\n\nDo you want to proceed?" 0 80) then
# Wipe the TPM TOTP/HOTP secret before flashing. Otherwise, enabling