4 Commits

Author	SHA1	Message	Date
Kyle Rankin	79a09e7424	Ignore PCR5 when sealing key when Librem Key is enabled ... When the Librem Key is enabled, the kernel loads USB modules at boot, this causes PCR5 to change and breaks unsealing the LUKS key (if set). This change retains the protection of the PCR5 check unless Librem Key is enabled.	2018-11-07 13:27:52 -08:00
Francis Lam	37feebdc76	Read and measure CBFS files into initrd during init	2018-04-20 09:29:57 -07:00
Trammell Hudson	af3170ebf7	remove trailing / on the /boot device parameter	2017-07-17 12:43:14 -04:00
Francis Lam	22a52ec4b8	Added TPM secret management to generic boot ... Also cleaned up error handling and boot parsing edge cases	2017-07-12 00:17:45 -04:00