canonical / canonical/secboot

tpm2: Remove redundant methods from the Connection API.

Open
#362 1 comment 0 reactions 0 assignees View on GitHub
preinstall-checks
Dominant language
Go
Stars
23
Forks
29
Avg merge
2d 8h
Merged PRs (30d)
2

Description

With the introduction of the `efi/preinstall` sub-package and the `RunChecks` API (and later on, the `RunChecksContext` API), some methods of the `Connection` API feel like they should eventually become redundant, eg:

- `Connection.IsEnabled` - this is something that the pre-install tests already do.
- `Connection.LockoutAuthSet` - the pre-install tests check that the TPM is not in DA lockout mode (although there's no way to check that the lockout hierarchy is locked out other than by using it) and it also ensures that the authorization values for the storage, endorsement and lockout hierarchies are all empty.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.