Kyle Rankin 79a09e7424

Ignore PCR5 when sealing key when Librem Key is enabled ...

When the Librem Key is enabled, the kernel loads USB modules at boot,
this causes PCR5 to change and breaks unsealing the LUKS key (if set).
This change retains the protection of the PCR5 check unless Librem Key
is enabled.

2018-11-07 13:27:52 -08:00

..

bin

Ignore PCR5 when sealing key when Librem Key is enabled

2018-11-07 13:27:52 -08:00

etc

Add Librem Key support to Heads

2018-06-19 12:27:27 -07:00

sbin

"$@" does not expand correctly in test expressions, use "$*" instead (issue #181)

2017-04-11 06:31:25 -04:00

.ash_history

preload the recovery shell command line history

2016-09-26 13:51:10 -04:00

init

Read and measure an EFI file into initrd during init

2018-04-29 19:58:44 -07:00

mount-boot

extract and verify gpg signature on the boot script

2016-08-06 17:13:22 -04:00