summaryrefslogtreecommitdiff
path: root/man/systemd-stub.xml
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2022-07-26 18:32:21 +0200
committerLennart Poettering <lennart@poettering.net>2022-08-02 10:28:49 +0200
commit599fe002a135570406504998dbb7a42dabc963da (patch)
treec6807d3756d63630ff62b235acb23ddd999bebde /man/systemd-stub.xml
parent8d5e4d59f2d1c648e3cd249b55d0825c814f7ad0 (diff)
downloadsystemd-599fe002a135570406504998dbb7a42dabc963da.tar.gz
efi: tell userspace where the stub measured the kernel command line/credentials into
This is useful for userspace to know, so that policies can be put together safely, matching what the stub actually measured.
Diffstat (limited to 'man/systemd-stub.xml')
-rw-r--r--man/systemd-stub.xml10
1 files changed, 9 insertions, 1 deletions
diff --git a/man/systemd-stub.xml b/man/systemd-stub.xml
index 92a20e259e..955fa6f98f 100644
--- a/man/systemd-stub.xml
+++ b/man/systemd-stub.xml
@@ -185,7 +185,7 @@
<row>
<entry>Credentials (synthesized initrd from companion files)</entry>
- <entry>12 + 9</entry>
+ <entry>9 + 12</entry>
</row>
<row>
@@ -239,6 +239,14 @@
<citerefentry><refentrytitle>bootctl</refentrytitle><manvolnum>1</manvolnum></citerefentry> to view
this data.</para></listitem>
</varlistentry>
+
+ <varlistentry>
+ <term><varname>StubPcrKernelParameters</varname></term>
+
+ <listitem><para>The PCR register index the kernel command line and credentials are measured into,
+ formatted as decimal ASCII string (i.e. <literal>12</literal>). This variable is set if a measurement
+ was successfully completed, and remains unset otherwise.</para></listitem>
+ </varlistentry>
</variablelist>
<para>Note that some of the variables above may also be set by the boot loader. The stub will only set