ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2025-03-10 22:43:57 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

extend PCR 4 in a recovery to prevent disk key decryption (issue #154)

Browse Source
This commit is contained in:
Trammell Hudson 2017-04-03 10:30:03 -04:00
parent 174bb64957
commit e41e21084a
Failed to extract signature
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
initrd/bin/qubes-init
View File

@ -8,7 +8,7 @@
recovery() { recovery() {
echo >&2 "!!!!! $@" echo >&2 "!!!!! $@"
rm -f /tmp/secret.key rm -f /tmp/secret.key
tpm extend -ix 4 -if recovery tpm extend -ix 4 -ic recovery
echo >&2 "!!!!! Starting recovery shell" echo >&2 "!!!!! Starting recovery shell"
exec /bin/ash exec /bin/ash