diff options
| author | Lennart Poettering <lennart@poettering.net> | 2022-09-16 17:24:08 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2022-09-16 17:24:56 +0200 |
| commit | d52e1c81b9ec2fe1eafe96f7c774ed4394f5a829 (patch) | |
| tree | 716b24704b6b7da463ea1f8b12198b6fd1a3ac69 | |
| parent | tmpfiles: let's suffix path to dirs with '/' also in log messages (diff) | |
| download | systemd-d52e1c81b9ec2fe1eafe96f7c774ed4394f5a829.tar.xz systemd-d52e1c81b9ec2fe1eafe96f7c774ed4394f5a829.zip | |
update TODO
Seeding RNG via SMBIOS is bad idea, since often measurement of SMBIOS
tables is used for TPM policies, under the assumption SMBIOS remains
static after a certain point.
| -rw-r--r-- | TODO | 5 |
1 files changed, 0 insertions, 5 deletions
@@ -187,11 +187,6 @@ Features: * sd-boot: include domain specific hash string in hash function for random seed plus sizes of everything. also include DMI/SMBIOS blob -* accept a random seed via DMI/SMBIOS vendor string that is credited to the - kernel RNG, as cheap alternative to virtio-rng (problem: when credited it - must also be invalidated, question is if we can safely do that for SMBIOS - data structures) - * sd-stub: invoke random seed logic the same way as in sd-boot, except if random seed EFI variable is already set. That way, the variable set will be set in all cases: if you just use sd-stub, or just sd-boot, or both. |