mirror of
https://github.com/linuxboot/heads.git
synced 2025-03-21 19:45:21 +00:00
extend PCR 4 in a recovery to prevent disk key decryption (issue #154)
This commit is contained in:
parent
174bb64957
commit
e41e21084a
@ -8,7 +8,7 @@
|
||||
recovery() {
|
||||
echo >&2 "!!!!! $@"
|
||||
rm -f /tmp/secret.key
|
||||
tpm extend -ix 4 -if recovery
|
||||
tpm extend -ix 4 -ic recovery
|
||||
|
||||
echo >&2 "!!!!! Starting recovery shell"
|
||||
exec /bin/ash
|
||||
|
Loading…
x
Reference in New Issue
Block a user