canonical / canonical/secboot

Test that no OS-present events appear in PCRs 0, 1, 2, and 3

Open
#537 1 comment 0 reactions 0 assignees View on GitHub
preinstall-checks
Dominant language
Go
Stars
23
Forks
29
Avg merge
2d 8h
Merged PRs (30d)
2

Description

The `efi` package only copies pre-OS events from the TCG log to the profile for PCRs 0 and 2, and will generate an invalid profile if the platform firmware measures anything after this. The preinstall tests should check for this for these PCRs (and 1 and 3 when supported) in order to catch this.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.