Thierry Laurion 0042163861

kexec-seal-key: remove non-needed shred of file cached /tmp/secret/tpm_owner_password (done when sealing fails under tpmr) ...

- document why shred is still called under functions:check_tpm_counter for safety and add TODO there

Signed-off-by: Thierry Laurion <insurgo@riseup.net>

2023-11-06 10:30:11 -05:00

..

basic-autoboot.sh

Add PureBoot Basic Mode

2023-06-21 13:26:45 -04:00

cbfs-init

PCR extend ops inform users on what happens, otherwise we tpm commands output on screen without context

2023-11-01 10:07:47 -04:00

cbfs.sh

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

config-gui.sh

config-gui.sh: Add option to toggle DEBUG and TRACE output from Configuration Settings menu

2023-08-25 14:27:51 -04:00

flash-gui.sh

Merge pull request #1485 from Nitrokey/nx-nitropad

2023-09-06 10:15:17 -04:00

flash.sh

initrd/bin/flash.sh: Improve speed and reliability

2023-09-05 16:04:30 -04:00

flashrom-kgpe-d16-openbmc.sh

TPM Disk Unlock Key sealing/renewal cleanup (Triggered automatically when resealing TOTP)

2023-08-30 18:06:29 -04:00

generic-init

io386: replace check for io386 to call lock_chip by a single common call from kexec-boot prior of real kexec

2023-06-12 13:51:20 -04:00

gpg-gui.sh

Change '16 60'-sized whiptail prompts to '0 80'

2023-06-30 14:21:11 -04:00

gpgv

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

gui-init

gui-init: fix TRACE: clean_check_boot stating mount_boot instead of clean_boot_check

2023-11-03 16:41:30 -04:00

gui-init-basic

Add CONFIG_BRAND_NAME and allow overriding in Makefile with BRAND_NAME

2023-06-21 14:47:59 -04:00

inject_firmware.sh

Blob jail: Add zstd-decompress, decompress more complex archives

2023-06-21 13:26:50 -04:00

kexec-boot

TPM Disk Unlock Key sealing/renewal cleanup (Triggered automatically when resealing TOTP)

2023-08-30 18:06:29 -04:00

kexec-insert-key

kexec-select-boot/kexec-insert-key: add info message explaining why PCR 4 is extended

2023-11-06 10:03:14 -05:00

kexec-iso-init

kexec-iso-init: add TinyCore iso boot logic (Based on https://github.com/u-root/webboot/)

2023-04-17 16:18:22 -04:00

kexec-parse-bls

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

kexec-parse-boot

kexec-parse-boot: fix isolinux iso booting

2023-04-17 16:19:08 -04:00

kexec-save-default

TPM2: add DEBUG and fix path for TPM2 primary key handle hash.

2023-11-02 14:17:52 -04:00

kexec-save-key

Remove TODO in code that were not relevant prior of first review

2023-11-01 10:08:19 -04:00

kexec-seal-key

kexec-seal-key: remove non-needed shred of file cached /tmp/secret/tpm_owner_password (done when sealing fails under tpmr)

2023-11-06 10:30:11 -05:00

kexec-select-boot

kexec-select-boot/kexec-insert-key: add info message explaining why PCR 4 is extended

2023-11-06 10:03:14 -05:00

kexec-sign-config

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

kexec-unseal-key

TPM Disk Unlock Key sealing/renewal cleanup (Triggered automatically when resealing TOTP)

2023-08-30 18:06:29 -04:00

key-init

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

lock_chip

lock_chip: parametrize locking in function of board config exported config option

2023-06-20 12:40:00 -04:00

media-scan

media-scan: die if gpg_auth fails (should loop and never exit anyway)

2023-11-06 10:04:51 -05:00

mount-usb

Wip: now supports both backup and copy to card and gpg_auth when backup exists. Might want to discuss that implementation. Some functions needed to be moved from functions to ash_functions so that gpg_auth can be called from recovery function. That might need to be discussed as well, recovery could be moved from ash_functions to functions instead.

2023-11-01 10:06:48 -04:00

network-init-recovery

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

nitropad-shutdown.sh

add nitropad-shutdown.sh for EC based poweroff

2023-09-05 17:13:56 +02:00

oem-factory-reset

oem-factory-reset: add rudimentary mount_boot function so that oem-factory-reset can be called early at boot without /boot previously mounted. Also fix logic so that GPG User PIN is showed as configured when keytocard or smartcard only is configured.

2023-11-03 16:41:33 -04:00

oem-system-info-xx30

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

poweroff

reboot/poweroff: run nitropad-shutdown.sh for required boards

2023-09-05 17:13:56 +02:00

qubes-measure-luks

PCR extend ops inform users on what happens, otherwise we tpm commands output on screen without context

2023-11-01 10:07:47 -04:00

reboot

initrd/bin/reboot: BugFix in nv41/ns50 condition check to call nitropad-shutdown.sh (otherwise output error on console for improper condition in ash

2023-11-01 10:07:53 -04:00

root-hashes-gui.sh

Add external/usb disk encryption (adds exfatprogs and e2fsprogs)

2023-08-28 16:23:48 -04:00

seal-hotpkey

oem-factory-reset seal-hotpkey: unify prompts and vocabulary

2023-11-01 10:08:00 -04:00

seal-totp

kexec-seal-key/seal-totp/tpmr/functions: move wiping of tpm_owner_password to tpmr calls directly

2023-11-03 10:54:16 -04:00

setconsolefont.sh

initrd/bin/setconsolefont.sh: Reduce threshold for 2x console to 1350

2023-08-11 14:40:11 -04:00

talos-init

initrd/bin/talos-init: remove alias for cbmem and bump coreboot revision

2023-07-12 14:50:54 +02:00

tpm-reset

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

tpmr

tpmr/kexec-seal-key/functions: end refactoring of tpmr being in carge of wiping /tmp/secret/tpm_owner_password if invalid

2023-11-03 13:53:47 -04:00

uefi-init

tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.

2023-03-08 12:45:46 -05:00

unpack_initramfs.sh

bin/unpack_initramfs.sh: Add TRACE and DEBUG traces

2023-09-02 01:51:50 -04:00

unseal-hotp

initrd/bin/unseal-hotp: Prevent script errors if unseal fails

2023-09-05 16:12:57 -04:00

unseal-totp

unseal-totp: fix indentation

2023-11-03 09:31:44 -04:00

usb-autoboot.sh

Add USB autoboot feature to PureBoot Basic

2023-06-21 13:26:46 -04:00

usb-init

media-scan/usb-init: add debugging info

2023-04-17 16:17:55 -04:00

wget-measure.sh

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

wipe-totp

Implement Restricted Boot Mode

2023-06-21 13:26:45 -04:00

xx30-flash.init

Combine t430-flash.init, x23-flash.init, fix insmod

2023-03-13 13:23:29 -04:00