mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-18 20:47:55 +00:00
extend PCR 4 in a recovery to prevent disk key decryption (issue #154)
This commit is contained in:
parent
174bb64957
commit
e41e21084a
@ -8,7 +8,7 @@
|
||||
recovery() {
|
||||
echo >&2 "!!!!! $@"
|
||||
rm -f /tmp/secret.key
|
||||
tpm extend -ix 4 -if recovery
|
||||
tpm extend -ix 4 -ic recovery
|
||||
|
||||
echo >&2 "!!!!! Starting recovery shell"
|
||||
exec /bin/ash
|
||||
|
Loading…
Reference in New Issue
Block a user