From 4554c178bf07ded86f9f3982f26e87afd1caf0f4 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 14 Oct 2022 11:32:43 +0200 Subject: update TODO --- TODO | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/TODO b/TODO index 642c596945..d4e21a7cbf 100644 --- a/TODO +++ b/TODO @@ -119,6 +119,12 @@ Deprecations and removals: Features: +* We should start measuring all services, containers, and system extensions we + activate. probably into PCR 13. i.e. add --tpm2-measure-pcr= or so to + systemd-nspawn, and MeasurePCR= to unit files. Should contain a measurement + of the activated configuration and the image that is being activated (in case + verity is used, hash of the root hash). + * whenever we measure something into a TPM PCR from userspace, write a record in TCG's "Canonical Event Log" format to some file, so that we can reason about how PCR values we manage came to -- cgit v1.2.1