2 Commits

Author	SHA1	Message	Date
Francis Lam	d67360a24b	Added rollback protection to generic boot ... Changed the checking of required hashes or required rollback state to be right before boot, allowing the user to sign/set defaults in interactive mode. Also cleaned up usages of recovery and fixed iso parameter regression.	2017-07-08 16:59:37 -04:00
Francis Lam	8004b5df2a	Added the ability to persist a default boot option ... Similar to qubes-update, it will save then verify the hashes of the kexec files. Once TOTP is verified, a normal boot will verify that the file hashes and all the kexec params match and if successful, boot directly to OS. Also added a config option to require hash verification for non-recovery boots, failing to recovery not met.	2017-07-04 19:49:14 -04:00