summaryrefslogtreecommitdiffstats
path: root/TODO
diff options
context:
space:
mode:
authorLuca Boccassi <bluca@debian.org>2022-05-21 16:08:21 +0200
committerGitHub <noreply@github.com>2022-05-21 16:08:21 +0200
commit051c4e5419fe3e23cfde55ce83af1d1ddd49c267 (patch)
tree80d0947a19a84f92e44818ea62937a0e583f7b36 /TODO
parentboot: Build with -flto=auto if available (diff)
parentupdate TODO (diff)
downloadsystemd-051c4e5419fe3e23cfde55ce83af1d1ddd49c267.tar.xz
systemd-051c4e5419fe3e23cfde55ce83af1d1ddd49c267.zip
Merge pull request #23342 from poettering/efi-monotonic-counter-random-seed
sd-boot: include GetNextMonotonicCount() in random seed calculations
Diffstat (limited to 'TODO')
-rw-r--r--TODO4
1 files changed, 0 insertions, 4 deletions
diff --git a/TODO b/TODO
index 2ae9aae7e2..9ff2a90fd4 100644
--- a/TODO
+++ b/TODO
@@ -263,10 +263,6 @@ Features:
* sd-boot: rework random seed handling following recent kernel changes: always
pass seed to kernel, but credit only if secure boot is used
-* sd-boot: hash data from GetNextHighMonotonicCount() into updated random seed,
- so that we might even open up up the random seed logic to non-SecureBoot
- systems?
-
* sd-boot: also include the hyperv "vm generation id" in the random seed hash,
to cover nicely for machine clones. It's found in the ACPI tables, which
should be easily accessible from UEFI.