Jonathon Hall 99673d373d

seal-hotpkey: Try default PIN only for 1 month and if >=3 attempts left ...

Only try the default PIN automatically for 1 month after key creation.
This simplifies initial ownership but still encourages changing the
PIN.

Never enter a PIN automatically if fewer than 3 attempts remain, to
avoid causing lockout if the PIN has been changed.

Remind what the default PIN was if it is not attempted for either
reason.

Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>

2023-07-06 13:22:40 -04:00

..

basic-autoboot.sh

Add PureBoot Basic Mode

2023-06-21 13:26:45 -04:00

cbfs-init

tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.

2023-03-08 12:45:46 -05:00

cbfs.sh

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

config-gui.sh

Restricted boot: Fix wording of 'disable' prompt, does not reset TPM

2023-06-30 14:31:53 -04:00

flash-gui.sh

Change '16 60'-sized whiptail prompts to '0 80'

2023-06-30 14:21:11 -04:00

flash.sh

Merge remote-tracking branch 'github-heads/master' into pureboot-27-heads-upstream

2023-07-05 14:32:16 -04:00

flashrom-kgpe-d16-openbmc.sh

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

generic-init

io386: replace check for io386 to call lock_chip by a single common call from kexec-boot prior of real kexec

2023-06-12 13:51:20 -04:00

gpg-gui.sh

Change '16 60'-sized whiptail prompts to '0 80'

2023-06-30 14:21:11 -04:00

gpgv

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

gui-init

Change '16 60'-sized whiptail prompts to '0 80'

2023-06-30 14:21:11 -04:00

gui-init-basic

Add CONFIG_BRAND_NAME and allow overriding in Makefile with BRAND_NAME

2023-06-21 14:47:59 -04:00

inject_firmware.sh

Blob jail: Add zstd-decompress, decompress more complex archives

2023-06-21 13:26:50 -04:00

kexec-boot

Merge remote-tracking branch 'github-heads/master' into pureboot-27-heads-upstream

2023-06-21 15:15:23 -04:00

kexec-insert-key

Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts

2023-03-10 12:11:57 -05:00

kexec-iso-init

kexec-iso-init: add TinyCore iso boot logic (Based on https://github.com/u-root/webboot/)

2023-04-17 16:18:22 -04:00

kexec-parse-bls

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

kexec-parse-boot

kexec-parse-boot: fix isolinux iso booting

2023-04-17 16:19:08 -04:00

kexec-save-default

kexec-save-default: Don't seal LUKS disk unlock key in basic mode

2023-06-30 14:37:38 -04:00

kexec-save-key

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

kexec-seal-key

Small cosmetic/typo related changes, ccache enablement for coreboot and reduction of unseal attempts

2023-03-10 12:11:57 -05:00

kexec-select-boot

Change '16 60'-sized whiptail prompts to '0 80'

2023-06-30 14:21:11 -04:00

kexec-sign-config

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

kexec-unseal-key

gui-init, kexec-unseal-key: Move PCR debugging output to DEBUG calls

2023-03-10 15:39:54 -05:00

key-init

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

lock_chip

lock_chip: parametrize locking in function of board config exported config option

2023-06-20 12:40:00 -04:00

media-scan

media-scan: Simplify implementation and improve RB message

2023-06-30 13:41:07 -04:00

mount-usb

Change '16 60'-sized whiptail prompts to '0 80'

2023-06-30 14:21:11 -04:00

network-init-recovery

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

oem-factory-reset

Merge remote-tracking branch 'github-heads/master' into pureboot-27-heads-upstream

2023-07-05 14:32:16 -04:00

oem-system-info-xx30

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

poweroff

poweroff, reboot: Do not use bash

2023-03-13 12:51:42 -04:00

qubes-measure-luks

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

reboot

poweroff, reboot: Do not use bash

2023-03-13 12:51:42 -04:00

root-hashes-gui.sh

Change '16 60'-sized whiptail prompts to '0 80'

2023-06-30 14:21:11 -04:00

seal-hotpkey

seal-hotpkey: Try default PIN only for 1 month and if >=3 attempts left

2023-07-06 13:22:40 -04:00

seal-totp

initrd/bin/seal-totp: PCR0-4 cannot be expected to be 0 on PPC64.

2023-06-04 20:20:46 +03:00

talos-init

initrd/bin/talos-init: disable fast-reset

2023-06-07 01:10:14 +03:00

tpm-reset

gui-init, tpm-reset: Enforce TPM password maximum length

2023-03-13 13:34:40 -04:00

tpmr

Implement Restricted Boot Mode

2023-06-21 13:26:45 -04:00

uefi-init

tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.

2023-03-08 12:45:46 -05:00

unpack_initramfs.sh

Blob jail: Add zstd-decompress, decompress more complex archives

2023-06-21 13:26:50 -04:00

unseal-hotp

Use 160 bits of ROM hash for TPM-less HOTP secret (up from 80)

2023-07-05 10:18:06 -04:00

unseal-totp

seal-totp, kexec-seal-key: Use common logic for TPM1 and TPM2

2023-03-08 12:45:57 -05:00

usb-autoboot.sh

Add USB autoboot feature to PureBoot Basic

2023-06-21 13:26:46 -04:00

usb-init

media-scan/usb-init: add debugging info

2023-04-17 16:17:55 -04:00

wget-measure.sh

Add dual support for real bash and busybox's bash(ash)

2023-03-08 12:45:44 -05:00

wipe-totp

Implement Restricted Boot Mode

2023-06-21 13:26:45 -04:00

xx30-flash.init

Combine t430-flash.init, x23-flash.init, fix insmod

2023-03-13 13:23:29 -04:00