ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2025-02-09 04:11:07 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

oem-factory-reset: set title_text accordingly to mode, either 'OEM Factory Reset Mode', 'Re-Ownership Mode' or 'OEM Factory Reset / Re-Ownership'

Browse Source 
TODO: further specialize warning prompt to tell what is going to happen (randomized PIN, signle custom randomized PIN etc)

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
This commit is contained in:
Thierry Laurion 2024-12-05 14:25:22 -05:00
parent 789231fac3
commit c372370210
No known key found for this signature in database
GPG Key ID: 9A53E1BB3FF00461
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
initrd/bin/oem-factory-reset
View File

@ -52,12 +52,16 @@ handle_mode() {
USER_PIN=$CUSTOM_SINGLE_PASS
ADMIN_PIN=$CUSTOM_SINGLE_PASS
TPM_PASS=$CUSTOM_SINGLE_PASS
title_text="OEM Factory Reset Mode"
;;
user)
DEBUG "User mode selected"
USER_PIN=$(generate_passphrase --number_words 2 --max_length $MAX_HOTP_GPG_PIN_LENGTH)
ADMIN_PIN=$(generate_passphrase --number_words 2 --max_length $MAX_HOTP_GPG_PIN_LENGTH)
TPM_PASS=$ADMIN_PIN
title_text="User Re-Ownership Mode"
;;
*)
warn "Unknown oem-factory-reset lauched mode, setting PINs to weak defaults"
@ -911,9 +915,7 @@ usb_security_token_capabilities_check() {
## main script start
# check for args
if [ "$1" != "" ]; then
title_text=$1
else
if [ -z "$title_text" ]; then
title_text="OEM Factory Reset / Re-Ownership"
fi
if [ "$2" != "" ]; then