diff options
author | Luca Boccassi <bluca@debian.org> | 2022-05-21 16:08:21 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-05-21 16:08:21 +0200 |
commit | 051c4e5419fe3e23cfde55ce83af1d1ddd49c267 (patch) | |
tree | 80d0947a19a84f92e44818ea62937a0e583f7b36 /TODO | |
parent | boot: Build with -flto=auto if available (diff) | |
parent | update TODO (diff) | |
download | systemd-051c4e5419fe3e23cfde55ce83af1d1ddd49c267.tar.xz systemd-051c4e5419fe3e23cfde55ce83af1d1ddd49c267.zip |
Merge pull request #23342 from poettering/efi-monotonic-counter-random-seed
sd-boot: include GetNextMonotonicCount() in random seed calculations
Diffstat (limited to 'TODO')
-rw-r--r-- | TODO | 4 |
1 files changed, 0 insertions, 4 deletions
@@ -263,10 +263,6 @@ Features: * sd-boot: rework random seed handling following recent kernel changes: always pass seed to kernel, but credit only if secure boot is used -* sd-boot: hash data from GetNextHighMonotonicCount() into updated random seed, - so that we might even open up up the random seed logic to non-SecureBoot - systems? - * sd-boot: also include the hyperv "vm generation id" in the random seed hash, to cover nicely for machine clones. It's found in the ACPI tables, which should be easily accessible from UEFI. |