tpm2-tools/0012-tpm2_eventlog-Extend-pcrs-using-event-EV_IPL.patch
Štěpán Horáček 8b31466bc1 Backport upstream fixes
Resolves: RHEL-164796

Signed-off-by: Štěpán Horáček <shoracek@redhat.com>
2026-05-25 20:52:48 +02:00

34 lines
1.0 KiB
Diff

From 9bf3121b9567ef031608f72b042411e0cfb39ac4 Mon Sep 17 00:00:00 2001
From: Juergen Repp <juergen_repp@web.de>
Date: Wed, 17 Dec 2025 11:44:23 +0100
Subject: [PATCH 12/30] tpm2_eventlog: Extend pcrs using event EV_IPL.
For TPM2 PCR measurements made by systemd for each PE section of the UKI that is
defined by the UAPI.5 UKI Specification PCR 11 is used.
Addresses: #3511
Signed-off-by: Juergen Repp <juergen_repp@web.de>
---
lib/tpm2_eventlog.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/lib/tpm2_eventlog.c b/lib/tpm2_eventlog.c
index 40148f8b..e6c94347 100644
--- a/lib/tpm2_eventlog.c
+++ b/lib/tpm2_eventlog.c
@@ -427,6 +427,11 @@ size_t i;
}
break;
+ /* For TPM2 PCR measurements made by systemd for each PE section of the UKI that is
+ defined by the UAPI.5 UKI Specification PCR 11 is used. */
+ case 11:
+ return true;
+
default:
LOG_WARN("Event %zu is unexectedly not extending either PCR 8, 9, 12 or 14", eventnum - 1);
return false;
--
2.54.0