heads/initrd
Jonathon Hall de7902f5b9
cbfs-init, insmod: Bring back params/filenames into PCR measurements
cbfs-init used to measure filenames as well as the data in the files,
but after refactoring it only measures file data.  This means files
could be renamed, or contents pivoted, without affecting the PCR
measurements.  Bring back the filename measurement.

Similarly, insmod used to measure module parameters, but no longer
does.  Though we don't currently insert any modules with parameters,
there's no reason to leave this open to break later, bring back the
measurement.

Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2024-09-06 09:43:14 -04:00
..
.gnupg gpg2: make sure dirmngr is not spawn to refresh keys under initrd/.gnupg/gpg.conf 2024-01-09 12:53:56 -05:00
bin cbfs-init, insmod: Bring back params/filenames into PCR measurements 2024-09-06 09:43:14 -04:00
etc Merge remote-tracking branch 'osresearch/master' into HEAD 2024-09-06 09:43:02 -04:00
run/cryptsetup [WIP] cross build json-c and cryptsetup 2020-10-28 15:28:05 +02:00
sbin cbfs-init, insmod: Bring back params/filenames into PCR measurements 2024-09-06 09:43:14 -04:00
.ash_history Merge pull request #1515 from tlaurion/inmemory_keygen-gpg_backup_usable_for_RSA_only-copy_to_card_working_for_RSA_only-gpg_auth_for_recovery_and_sub_boot 2023-11-13 16:05:26 -05:00
init init: make sure config.user is overriden only with new values so that going DEBUG/undoing can work reproducibly 2024-09-01 21:01:04 -04:00
mount-boot Add dual support for real bash and busybox's bash(ash) 2023-03-08 12:45:44 -05:00