ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-24 07:06:42 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

gui-init: put change-time under TOTP mismatch where it should be, remove unneeded duplicate menu options to change system time

Browse Source 
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
This commit is contained in:
Thierry Laurion 2024-07-29 09:59:38 -04:00
parent a99298acb2
commit f4ce047167
No known key found for this signature in database
GPG Key ID: 9A53E1BB3FF00461
1 changed files with 2 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
initrd/bin/gui-init
View File

@ -221,7 +221,6 @@ update_totp()
If you have not just reflashed your BIOS, THIS COULD INDICATE TAMPERING!\n If you have not just reflashed your BIOS, THIS COULD INDICATE TAMPERING!\n
How would you like to proceed?" 0 80 4 \ How would you like to proceed?" 0 80 4 \
'g' ' Generate new HOTP/TOTP secret' \ 'g' ' Generate new HOTP/TOTP secret' \
'h' ' Change system time' \
'i' ' Ignore error and continue to main menu' \ 'i' ' Ignore error and continue to main menu' \
'p' ' Reset the TPM' \ 'p' ' Reset the TPM' \
'x' ' Exit to recovery shell' \ 'x' ' Exit to recovery shell' \
@ -235,9 +234,6 @@ update_totp()
generate_totp_hotp && update_totp && BG_COLOR_MAIN_MENU="normal" && reseal_tpm_disk_decryption_key generate_totp_hotp && update_totp && BG_COLOR_MAIN_MENU="normal" && reseal_tpm_disk_decryption_key
fi fi
;; ;;
h )
change-time
;;
i ) i )
skip_to_menu="true" skip_to_menu="true"
return 1 return 1
@ -551,16 +547,8 @@ prompt_totp_mismatch()
{ {
TRACE_FUNC TRACE_FUNC
if (whiptail_warning --title "TOTP/HOTP code mismatched" \ if (whiptail_warning --title "TOTP/HOTP code mismatched" \
--yesno "TOTP/HOTP code mismatches could indicate either TPM tampering or clock drift:\n\nTo correct clock drift: 'date -s yyyy-MM-DD hh:mm:ss' in UTC timezone\nand save it to the RTC: 'hwclock -w'\nthen reboot and try again.\n\nWould you like to exit to a recovery console?" 0 80) then --yesno "TOTP/HOTP code mismatches could indicate either TPM tampering or clock drift.\n\nHere, we will manually set system time to see if TOTP code mismatch was because of time drift.\n\nAlternatively you could sync time from network automatically with 'network-init-recovery' helper from Recovery shell\n " 0 80) then
echo "" change-time
echo "To correct clock drift: 'date -s yyyy-MM-DD hh:mm:ss' in UTC timezone"
echo "and save it to the RTC: 'hwclock -w'"
echo ""
echo "Alternatively you could do this automatically with an Ethernet cable connected to a functional network: 'network-init-recovery'"
echo ""
echo "Then reboot and try again"
echo ""
recovery "TOTP/HOTP mismatch"
fi fi
} }