Matt DeVillier 0dbc748233

unseal-hotp: ensure /boot mounted before checking HOTP secret ...

If /boot isn't mounted, we can't read the HOTP counter, so no
point in reading from the TPM. This speeds up getting to the
main menu in the case of an inaccessible or non-existant /boot.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

2019-11-18 21:52:48 -06:00

..

cbfs-init

Read and measure an EFI file into initrd during init

2018-04-29 19:58:44 -07:00

config-gui.sh

config-gui: add 'Full Reset' option

2019-08-05 11:03:45 -05:00

flash-gui.sh

flash-gui: clean up ROM list

2019-06-25 10:00:54 -05:00

flash.sh

flash.sh: persist serial in cbfs

2019-08-05 11:06:46 -05:00

flashrom-kgpe-d16-openbmc.sh

Re-add the flashrom script for kgpe-d16-openbmc

2018-05-11 14:23:48 -07:00

generic-init

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

gpg-gui.sh

gpg-gui: remove OEM factory reset option

2019-08-21 17:10:24 -05:00

gpgv

Enable gpg with card support (issue #32)

2017-04-05 17:59:49 -04:00

gui-init

gui-init: add clean boot check

2019-08-21 17:10:25 -05:00

kexec-boot

Keep Xen cmdline arguments while appending Heads required ones. Fixes #536

2019-03-17 19:37:31 -04:00

kexec-insert-key

Allow boot without unseal of TPM LUKS key

2017-09-02 14:13:29 -04:00

kexec-iso-init

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

kexec-parse-bls

Parse grub config files for Fedora 29/30

2019-05-02 22:23:59 +01:00

kexec-parse-boot

Strip invalid leading/trailing '/' from script params

2017-09-02 14:13:29 -04:00

kexec-save-default

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

kexec-save-key

Allow TPM LUKS key to be set during default selection

2017-09-02 14:13:29 -04:00

kexec-seal-key

also shred LUKS sealed secret when done instead of rm it

2019-02-24 10:29:09 -05:00

kexec-select-boot

kecec_select_boot: default to Y when setting new boot option

2019-08-05 11:03:46 -05:00

kexec-sign-config

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

kexec-unseal-key

supress errors on console when files don't exist (equivalent of rm -f)

2019-02-24 10:28:57 -05:00

key-init

properly deal with trusting keys to supress UX confusion about trusted keys

2019-02-08 12:38:38 -05:00

mount-usb

Bugfixes to mount-usb

2019-04-16 12:55:00 -07:00

network-init-recovery

Add all supported network modules to network-init-recovery

2018-04-20 09:29:57 -07:00

oem-factory-reset

initrd/bin: add OEM Factory Reset

2019-08-21 17:10:23 -05:00

poweroff

Ensure recovery for failed default boot

2017-09-02 14:13:29 -04:00

qubes-measure-luks

qubes init script and improved TPM disk encryption with LUKS headers (issue #123 and #6)

2017-04-01 23:02:00 -04:00

reboot

Ensure recovery for failed default boot

2017-09-02 14:13:29 -04:00

seal-libremkey

seal-libremkey: add newlines for readability

2019-07-12 11:51:17 -05:00

seal-totp

shred TOTP_SECRET also when generation is successful

2019-02-24 11:11:00 -05:00

tpm-reset

helper to do a forcible TPM reset (issue #27)

2017-04-12 06:45:15 -04:00

uefi-init

Read and measure an EFI file into initrd during init

2018-04-29 19:58:44 -07:00

unseal-hotp

unseal-hotp: ensure /boot mounted before checking HOTP secret

2019-11-18 21:52:48 -06:00

unseal-totp

supress errors on console when files don't exist (equivalent of rm -f)

2019-02-24 10:28:57 -05:00

usb-init

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

usb-scan

Skip prompt to set default boot when booting from USB

2019-06-25 10:01:18 -05:00

wget-measure.sh

wget and measure files into the PCR

2017-03-27 18:03:29 -04:00

x230-flash.init

initrd: x230-flash: fix commandline instructions for flashing

2019-05-23 13:10:53 +02:00