summaryrefslogtreecommitdiff
path: root/README.tpm
diff options
context:
space:
mode:
authorMathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>2018-08-21 14:22:44 -0400
committerMathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>2018-08-21 14:22:44 -0400
commit7bf7a6d0852382bb645119b18df3ff461aaba247 (patch)
tree74089c9a1e552dfb9e5efa57468c8d7afda7e415 /README.tpm
parentf892ac66084ab0315adb0c52e4a39b518730d023 (diff)
downloadefi-boot-shim-upstream/15+1533136590.3beb971.tar.gz
efi-boot-shim-upstream/15+1533136590.3beb971.zip
New upstream version 15+1533136590.3beb971upstream/15+1533136590.3beb971
Diffstat (limited to 'README.tpm')
-rw-r--r--README.tpm9
1 files changed, 9 insertions, 0 deletions
diff --git a/README.tpm b/README.tpm
index b7314f12..d9c7c534 100644
--- a/README.tpm
+++ b/README.tpm
@@ -19,6 +19,15 @@ PCR7:
- MokSBState will be extended into PCR7 if it is set, logged as
"MokSBState".
+PCR8:
+- If you're using the grub2 TPM patchset we cary in Fedora, the kernel command
+ line and all grub commands (including all of grub.cfg that gets run) are
+ measured into PCR8.
+
+PCR9:
+- If you're using the grub2 TPM patchset we cary in Fedora, the kernel,
+ initramfs, and any multiboot modules loaded are measured into PCR9.
+
PCR14:
- MokList, MokListX, and MokSBState will be extended into PCR14 if they are
set.