ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2025-01-29 15:44:07 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
heads/initrd/bin
History
Jonathon Hall 215ff2a397
reboot, poweroff: Prepare TPM2 for shutdown 
TPM2 must be prepared for shutdown, or it may track an auth failure for
dictionary attack prevention (per the spec, to prevent an attack by
attempting to authenticate and then powering off the TPM before it can
update the nonvolatile counter).

Add tpmr shutdown to prepare for shutdown (no-op on TPM1).  Invoke it
from poweroff and reboot.

Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-03-08 16:20:21 -05:00
..
cbfs-init
tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.
2023-03-08 12:45:46 -05:00
cbfs.sh
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
config-gui.sh
tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.
2023-03-08 12:45:46 -05:00
flash-gui.sh
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
flash.sh
*-flash.init: Use busybox ash
2023-03-08 12:45:53 -05:00
flashrom-kgpe-d16-openbmc.sh
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
generic-init
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
gpg-gui.sh
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
gpgv
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
gui-init
tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.
2023-03-08 12:45:46 -05:00
kexec-boot
tpmr: Add kexec_finalize command to finalize TPM before boot
2023-03-08 12:45:49 -05:00
kexec-insert-key
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
kexec-iso-init
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
kexec-parse-bls
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
kexec-parse-boot
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
kexec-save-default
tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.
2023-03-08 12:45:46 -05:00
kexec-save-key
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
kexec-seal-key
kexec-seal-key: Fix masked parameter position in tpmr seal
2023-03-08 16:19:37 -05:00
kexec-select-boot
kexec-select-boot: For debug inspection, drop to recovery
2023-03-08 12:45:48 -05:00
kexec-sign-config
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
kexec-unseal-key
seal-totp, kexec-seal-key: Use common logic for TPM1 and TPM2
2023-03-08 12:45:57 -05:00
key-init
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
media-scan
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
mount-usb
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
network-init-recovery
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
oem-factory-reset
tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.
2023-03-08 12:45:46 -05:00
oem-system-info-xx30
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
poweroff
reboot, poweroff: Prepare TPM2 for shutdown
2023-03-08 16:20:21 -05:00
qubes-measure-luks
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
reboot
reboot, poweroff: Prepare TPM2 for shutdown
2023-03-08 16:20:21 -05:00
seal-hotpkey
seal-totp, kexec-seal-key: Use common logic for TPM1 and TPM2
2023-03-08 12:45:57 -05:00
seal-totp
seal-totp, kexec-seal-key: Use common logic for TPM1 and TPM2
2023-03-08 12:45:57 -05:00
t430-flash.init
*-flash.init: Use busybox ash
2023-03-08 12:45:53 -05:00
tpm-reset
tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.
2023-03-08 12:45:46 -05:00
tpmr
reboot, poweroff: Prepare TPM2 for shutdown
2023-03-08 16:20:21 -05:00
uefi-init
tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.
2023-03-08 12:45:46 -05:00
unseal-hotp
seal-totp, kexec-seal-key: Use common logic for TPM1 and TPM2
2023-03-08 12:45:57 -05:00
unseal-totp
seal-totp, kexec-seal-key: Use common logic for TPM1 and TPM2
2023-03-08 12:45:57 -05:00
usb-init
tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.
2023-03-08 12:45:46 -05:00
wget-measure.sh
Add dual support for real bash and busybox's bash(ash)
2023-03-08 12:45:44 -05:00
x230-flash.init
*-flash.init: Use busybox ash
2023-03-08 12:45:53 -05:00