summaryrefslogtreecommitdiffstats
path: root/docs
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2023-10-10 15:51:38 +0200
committerLuca Boccassi <luca.boccassi@gmail.com>2023-10-11 00:31:33 +0200
commit22d7fb66469dbf76b4c9a90b3a57cc87fde70b8f (patch)
treeedaca4a5a62bed50b397ddb03c99fda9739745b0 /docs
parentloginctl: *-status: set minimum table column width if extra info will be printed (diff)
downloadsystemd-22d7fb66469dbf76b4c9a90b3a57cc87fde70b8f.tar.xz
systemd-22d7fb66469dbf76b4c9a90b3a57cc87fde70b8f.zip
docs: document that in future we'll do EV_EVENT_TAG only, no EV_IPL
Diffstat (limited to 'docs')
-rw-r--r--docs/TPM2_PCR_MEASUREMENTS.md10
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/TPM2_PCR_MEASUREMENTS.md b/docs/TPM2_PCR_MEASUREMENTS.md
index 7601c15531..462a86b36c 100644
--- a/docs/TPM2_PCR_MEASUREMENTS.md
+++ b/docs/TPM2_PCR_MEASUREMENTS.md
@@ -29,6 +29,16 @@ Currently, four components will issue TPM2 PCR measurements:
A userspace measurement event log in a format close to TCG CEL-JSON is
maintained in `/run/log/systemd/tpm2-measure.log`.
+## Measurements Added in Future
+
+We expect that we'll add further PCR extensions in future (both in firmware and
+user mode), which also will be documented here. When executed from firmware
+mode future additions are expected to be recorded as `EV_EVENT_TAG`
+measurements in the event log, in order to make them robustly
+recognizable. Measurements currently recorded as `EV_IPL` will continue to be
+recorded as `EV_IPL`, for compatibility reasons. However, `EV_IPL` will not be
+used for new, additional measurements.
+
## PCR Measurements Made by `systemd-boot` (UEFI)
### PCS 5, `EV_EVENT_TAG`, "loader.conf"