ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-19 04:57:55 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
30236ffbaa
heads/initrd/bin
History
alex-nitrokey 30236ffbaa
Delete AES keys of Nitrokey Storage after reset 
If smartcard Nitrokey Storage was factory-reset, we delete AES keys on
it as well.

Explaination: After oem-factory-reset was started the AES on the Nitrokey Storage that is used for the encrypted volume and the password safe is is not usable anymore because the smart card was factory-reset. To make it usable, a user needs to delete it via Nitrokey App. By doing so, the HOTP secret is deleted as well, resulting in a bad warning in Heads. Therefore, we are resetting AES key right after factory-reset with hotp_verification
2020-06-30 18:29:42 +02:00
..
cbfs-init Read and measure an EFI file into initrd during init 2018-04-29 19:58:44 -07:00
config-gui.sh config-gui: mount new /boot after selection 2019-11-18 11:16:53 -06:00
flash-gui.sh Eliminate use of CONFIG_USB_BOOT_DEV 2020-02-19 22:32:08 -06:00
flash.sh Flash.sh cleanup: Fix FLASHROM_OPTIONS -> CONFIG_FLASHROM_OPTIONS to be exported by Makefile 2020-02-19 17:18:01 -05:00
flashrom-kgpe-d16-openbmc.sh Re-add the flashrom script for kgpe-d16-openbmc 2018-05-11 14:23:48 -07:00
generic-init Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
gpg-gui.sh Add option to export pubkey 2020-06-23 15:32:51 +02:00
gpgv Enable gpg with card support (issue #32) 2017-04-05 17:59:49 -04:00
gui-init Merge branch 'hotp-neutral' into storage-factoryreset 2020-06-30 16:17:51 +02:00
kexec-boot Keep Xen cmdline arguments while appending Heads required ones. Fixes #536 2019-03-17 19:37:31 -04:00
kexec-insert-key Allow boot without unseal of TPM LUKS key 2017-09-02 14:13:29 -04:00
kexec-iso-init Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
kexec-parse-bls Parse grub config files for Fedora 29/30 2019-05-02 22:23:59 +01:00
kexec-parse-boot Strip invalid leading/trailing '/' from script params 2017-09-02 14:13:29 -04:00
kexec-save-default kexec-save-default: guard TPM LUKS usage with config option 2020-06-08 11:40:55 -05:00
kexec-save-key Allow TPM LUKS key to be set during default selection 2017-09-02 14:13:29 -04:00
kexec-seal-key Replace libremkey_htop_* by hotp_* 2020-06-25 15:35:47 +02:00
kexec-select-boot kecec_select_boot: default to Y when setting new boot option 2019-08-05 11:03:46 -05:00
kexec-sign-config Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
kexec-unseal-key supress errors on console when files don't exist (equivalent of rm -f) 2019-02-24 10:28:57 -05:00
key-init properly deal with trusting keys to supress UX confusion about trusted keys 2019-02-08 12:38:38 -05:00
mount-usb mount-usb: suppress error output from calls to stat 2020-05-04 11:41:21 -05:00
network-init-recovery network-init-recovery: do DHCP, then ask NTP from DNS server before attempting sync on internet 2020-04-22 15:00:48 -04:00
oem-factory-reset Delete AES keys of Nitrokey Storage after reset 2020-06-30 18:29:42 +02:00
poweroff Ensure recovery for failed default boot 2017-09-02 14:13:29 -04:00
qubes-measure-luks qubes init script and improved TPM disk encryption with LUKS headers (issue #123 and #6) 2017-04-01 23:02:00 -04:00
reboot Ensure recovery for failed default boot 2017-09-02 14:13:29 -04:00
seal-hotpkey Replace libremkey_htop_* by hotp_* 2020-06-25 15:35:47 +02:00
seal-totp shred TOTP_SECRET also when generation is successful 2019-02-24 11:11:00 -05:00
t430-flash.init Add T430 board support 2020-05-15 18:52:11 +01:00
tpm-reset helper to do a forcible TPM reset (issue #27) 2017-04-12 06:45:15 -04:00
uefi-init Read and measure an EFI file into initrd during init 2018-04-29 19:58:44 -07:00
unseal-hotp unseal-hotp: ensure /boot mounted before checking HOTP secret 2019-11-18 21:52:48 -06:00
unseal-totp supress errors on console when files don't exist (equivalent of rm -f) 2019-02-24 10:28:57 -05:00
usb-init Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
usb-scan Eliminate use of CONFIG_USB_BOOT_DEV 2020-02-19 22:32:08 -06:00
wget-measure.sh wget and measure files into the PCR 2017-03-27 18:03:29 -04:00
x230-flash.init initrd: x230-flash: fix commandline instructions for flashing 2019-05-23 13:10:53 +02:00