summaryrefslogtreecommitdiff
path: root/README.tpm
diff options
context:
space:
mode:
Diffstat (limited to 'README.tpm')
-rw-r--r--README.tpm16
1 files changed, 8 insertions, 8 deletions
diff --git a/README.tpm b/README.tpm
index fd2252d4..73dc468c 100644
--- a/README.tpm
+++ b/README.tpm
@@ -9,14 +9,14 @@ PCR4:
PCR7:
- Any certificate in one of our certificate databases that matches a binary
we try to load will be extended into PCR7. That includes:
- - DBX - the system blacklist, logged as "dbx"
- - MokListX - the Mok blacklist, logged as "MokListX"
- - vendor_dbx - shim's built-in vendor blacklist, logged as "dbx"
- - DB - the system whitelist, logged as "db"
- - vendor_db - shim's built-in vendor whitelist, logged as "db"
- - MokList the Mok whitelist, logged as "MokList"
- - vendor_cert - shim's built-in vendor whitelist, logged as "Shim"
- - shim_cert - shim's build-time generated whitelist, logged as "Shim"
+ - DBX - the system denylist, logged as "dbx"
+ - MokListX - the Mok denylist, logged as "MokListX"
+ - vendor_dbx - shim's built-in vendor denylist, logged as "dbx"
+ - DB - the system allowlist, logged as "db"
+ - vendor_db - shim's built-in vendor allowlist, logged as "db"
+ - MokList the Mok allowlist, logged as "MokList"
+ - vendor_cert - shim's built-in vendor allowlist, logged as "Shim"
+ - shim_cert - shim's build-time generated allowlist, logged as "Shim"
- MokSBState will be extended into PCR7 if it is set, logged as
"MokSBState".