diff options
| author | Lennart Poettering <lennart@poettering.net> | 2023-09-25 11:09:34 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2023-09-25 17:17:20 +0200 |
| commit | 75174a5de9d5a3df585e43cee4c795f794cd5ab2 (patch) | |
| tree | 08e2ff2efc1906f28763bfc1711475e42ee9a9e2 | |
| parent | pcrextend: make PCR index configurable (diff) | |
| download | systemd-75174a5de9d5a3df585e43cee4c795f794cd5ab2.tar.xz systemd-75174a5de9d5a3df585e43cee4c795f794cd5ab2.zip | |
man: briefly document that we are now keeping an event log in userspace for out measurements
| -rw-r--r-- | man/systemd-pcrphase.service.xml | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/man/systemd-pcrphase.service.xml b/man/systemd-pcrphase.service.xml index 807317a7de..fe7b58933b 100644 --- a/man/systemd-pcrphase.service.xml +++ b/man/systemd-pcrphase.service.xml @@ -205,6 +205,30 @@ </refsect1> <refsect1> + <title>Files</title> + + <variablelist> + <varlistentry> + <term><filename>/var/log/systemd/tpm2-measure.log</filename></term> + + <listitem><para>Measurements are logged into an event log file maintained in + <filename>/var/log/systemd/tpm2-measure.log</filename>, which contains a <ulink + url="https://www.rfc-editor.org/rfc/rfc7464.html">JSON-SEQ</ulink> series of objects that follow the + general structure of the <ulink + url="https://trustedcomputinggroup.org/resource/canonical-event-log-format/">TCG Common Event Log + Format (CEL-JSON)</ulink> event objects (but lack the <literal>recnum</literal> + field).</para> + + <para>A <constant>LOCK_EX</constant> BSD file lock (<citerefentry + project='man-pages'><refentrytitle>flock</refentrytitle><manvolnum>2</manvolnum></citerefentry>) on + the log file is acquired while the measurement is made and the file is updated. Thus, applications + that intend to acquire a consistent quote from the TPM with the associated snapshot of the event log + should acquire a <constant>LOCK_SH</constant> lock while doing so.</para></listitem> + </varlistentry> + </variablelist> + </refsect1> + + <refsect1> <title>See Also</title> <para> <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>, |