mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-18 20:47:55 +00:00
c42084406d
TPM v1.2 has a limitation in that only a single monotonic counter can be incremented between reboots [1]. So in the event we are using HOTP monotonic counters, we need to reference those for the Heads rollback counter when we update file signatures in /boot, otherwise the increment stage at kexec-sign-config will fail since at each boot, the HOTP monotonic counter has already been incremented. [1] https://projects.csail.mit.edu/tc/tpmj/UsersGuide.html#inccounter |
||
---|---|---|
.. | ||
bin | ||
etc | ||
sbin | ||
.ash_history | ||
init | ||
mount-boot |