diff options
| author | Lennart Poettering <lennart@poettering.net> | 2021-09-20 15:10:33 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2021-09-23 17:24:09 +0200 |
| commit | faacf1807e8fcbee4bf60495e0145e4522d76393 (patch) | |
| tree | 9531eeda6c23b63b247db7fd4a7c8ca04e652109 /meson_options.txt | |
| parent | 845707aae23b3129db635604edb95c4048a5922a (diff) | |
| download | systemd-faacf1807e8fcbee4bf60495e0145e4522d76393.tar.gz | |
boot: stop making TPM PCR to measure kernel command line into configurable
Everyone appears to use PCR 8 for this, hence I think it's safe to
hardcode that in systemd too.
It's also documented, like here:
https://www.gnu.org/software/grub/manual/grub/html_node/Measured-Boot.html
or here:
https://github.com/rhboot/shim/blob/main/README.tpm
(And the previous name was a bit confusing, since we don't actually just
measure one thing anymore, but mutliple things into multiple PCRs...)
Diffstat (limited to 'meson_options.txt')
| -rw-r--r-- | meson_options.txt | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/meson_options.txt b/meson_options.txt index b122f275da..e094d48c6e 100644 --- a/meson_options.txt +++ b/meson_options.txt @@ -416,8 +416,6 @@ option('efi-libdir', type : 'string', description : 'path to the EFI lib directory') option('efi-includedir', type : 'string', value : '/usr/include/efi', description : 'path to the EFI header directory') -option('tpm-pcrindex', type : 'integer', value : 8, - description : 'TPM PCR register number to use') option('sbat-distro', type : 'string', description : 'SBAT distribution ID, e.g. fedora, or auto for autodetection') option('sbat-distro-generation', type : 'integer', value : 1, |