diff options
author | Lennart Poettering <lennart@poettering.net> | 2023-10-10 15:51:38 +0200 |
---|---|---|
committer | Luca Boccassi <luca.boccassi@gmail.com> | 2023-10-11 00:31:33 +0200 |
commit | 22d7fb66469dbf76b4c9a90b3a57cc87fde70b8f (patch) | |
tree | edaca4a5a62bed50b397ddb03c99fda9739745b0 /docs | |
parent | loginctl: *-status: set minimum table column width if extra info will be printed (diff) | |
download | systemd-22d7fb66469dbf76b4c9a90b3a57cc87fde70b8f.tar.xz systemd-22d7fb66469dbf76b4c9a90b3a57cc87fde70b8f.zip |
docs: document that in future we'll do EV_EVENT_TAG only, no EV_IPL
Diffstat (limited to 'docs')
-rw-r--r-- | docs/TPM2_PCR_MEASUREMENTS.md | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/TPM2_PCR_MEASUREMENTS.md b/docs/TPM2_PCR_MEASUREMENTS.md index 7601c15531..462a86b36c 100644 --- a/docs/TPM2_PCR_MEASUREMENTS.md +++ b/docs/TPM2_PCR_MEASUREMENTS.md @@ -29,6 +29,16 @@ Currently, four components will issue TPM2 PCR measurements: A userspace measurement event log in a format close to TCG CEL-JSON is maintained in `/run/log/systemd/tpm2-measure.log`. +## Measurements Added in Future + +We expect that we'll add further PCR extensions in future (both in firmware and +user mode), which also will be documented here. When executed from firmware +mode future additions are expected to be recorded as `EV_EVENT_TAG` +measurements in the event log, in order to make them robustly +recognizable. Measurements currently recorded as `EV_IPL` will continue to be +recorded as `EV_IPL`, for compatibility reasons. However, `EV_IPL` will not be +used for new, additional measurements. + ## PCR Measurements Made by `systemd-boot` (UEFI) ### PCS 5, `EV_EVENT_TAG`, "loader.conf" |