ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-19 04:57:55 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
37bb4906ce
heads/initrd/bin
History
Thierry Laurion 37bb4906ce
oem-factory-reset: fix bug where it was impossible to just change LUKS passphrase without reencrypting encrypted container. 
Since /etc/luks-functions are currently exporting passphrases tested good per cryptsetup to be reused in the code,
the logic calling both luks_reencrypt and luks_change_passphrase testing for non-empty luks_current_Disk_Recovery_Key_passphrase
was bogus.

This commit includes a new variable luks_new_Disk_Recovery_Key_desired which is set when reencryption is desired.
The 3 use cases (reencrypt+passphrase change, reencrypt no passphrase change and passphrase change alone now only test
for luks_new_Disk_Recovery_Key_desired and luks_new_Disk_Recovery_Key_passphrase_desired, nothing else.
2022-05-03 16:41:07 -04:00
..
cbfs-init Read and measure an EFI file into initrd during init 2018-04-29 19:58:44 -07:00
config-gui.sh etc/functions, gpg-gui: Filter boot device options with '/dev/' 2021-10-15 14:42:15 -04:00
flash-gui.sh NEWT: fix whiptail line width for output that could wrap line content over multiple lines 2021-10-29 14:53:53 -04:00
flash.sh flash.sh: Add progress bar 2021-12-17 16:48:34 -05:00
flashrom-kgpe-d16-openbmc.sh Re-add the flashrom script for kgpe-d16-openbmc 2018-05-11 14:23:48 -07:00
generic-init Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
gpg-gui.sh NEWT: fix whiptail line width for output that could wrap line content over multiple lines 2021-10-29 14:53:53 -04:00
gpgv Enable gpg with card support (issue #32) 2017-04-05 17:59:49 -04:00
gui-init /bin/reencrypt-luks: rename to /etc/luks-functions 2022-04-06 17:17:07 -05:00
kexec-boot kexec-boot: Streamline cmdline remove filtering 2021-10-15 13:40:24 -05:00
kexec-insert-key Allow boot without unseal of TPM LUKS key 2017-09-02 14:13:29 -04:00
kexec-iso-init bin/kexec-iso-init: Add support for Arch iso support requirements (found at https://mbusb.aguslr.com/howto.html) 2022-03-07 19:02:29 -05:00
kexec-parse-bls kexec-parse-boot/bls: Strip boot dir from front of grub entries (#804) 2020-08-24 16:42:33 -04:00
kexec-parse-boot Tweak syslinux parsing code to be compatible with new Arch isos 2022-03-07 19:02:29 -05:00
kexec-save-default Change hash files only if gpg card is present 2020-10-15 17:05:12 +02:00
kexec-save-key Change hash files only if gpg card is present 2020-10-15 17:05:12 +02:00
kexec-seal-key Replace libremkey_htop_* by hotp_* 2020-06-25 15:35:47 +02:00
kexec-select-boot fix removal of --menu from commit ba054b15c3 2022-04-13 11:15:52 -04:00
kexec-sign-config kexec-sign-config: fix args to getopts 2020-11-06 15:16:29 -05:00
kexec-unseal-key supress errors on console when files don't exist (equivalent of rm -f) 2019-02-24 10:28:57 -05:00
key-init properly deal with trusting keys to supress UX confusion about trusted keys 2019-02-08 12:38:38 -05:00
mount-usb gui*: Improve consistency of background color use 2021-10-15 14:42:15 -04:00
network-init-recovery bin/network-init-recovery: generate random MAC and set it to eth0 2022-04-29 10:26:12 -04:00
oem-factory-reset oem-factory-reset: fix bug where it was impossible to just change LUKS passphrase without reencrypting encrypted container. 2022-05-03 16:41:07 -04:00
poweroff Ensure recovery for failed default boot 2017-09-02 14:13:29 -04:00
qubes-measure-luks Use luksHeaderBackup rather than luksDump to measure luks headers. 2022-01-19 10:12:37 -05:00
reboot Ensure recovery for failed default boot 2017-09-02 14:13:29 -04:00
seal-hotpkey seal-hotp: Fix HOTP key identification 2020-07-24 12:45:44 -05:00
seal-totp Display TOTP secret as text 2021-08-07 17:40:13 +00:00
t430-flash.init Add T430 board support 2020-05-15 18:52:11 +01:00
tpm-reset helper to do a forcible TPM reset (issue #27) 2017-04-12 06:45:15 -04:00
uefi-init Read and measure an EFI file into initrd during init 2018-04-29 19:58:44 -07:00
unseal-hotp unseal-hotp: ensure /boot mounted before checking HOTP secret 2019-11-18 21:52:48 -06:00
unseal-totp supress errors on console when files don't exist (equivalent of rm -f) 2019-02-24 10:28:57 -05:00
usb-init Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
usb-scan gui*: Improve consistency of background color use 2021-10-15 14:42:15 -04:00
wget-measure.sh wget and measure files into the PCR 2017-03-27 18:03:29 -04:00
x230-flash.init initrd: x230-flash: fix commandline instructions for flashing 2019-05-23 13:10:53 +02:00