scottk/secureblue
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/secureblue.git synced 2025-11-02 03:18:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: adjust patch in response to upstream changes

Browse Source
This commit is contained in:
qoijjj
2024-08-19 15:20:41 -07:00
parent b51dfb9049
commit 9d929fb087
1 changed files with 2 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
files/scripts/improve-luks-tpm-script.patch
View File

@@ -1,18 +1,4 @@
6a7,11
> echo "WARNING: Do NOT use this if your CPU is vulnerable to faulTPM!"
> echo "All AMD Zen2 and Zen3 Processors are known to be affected!"
> echo "All AMD Zen1 processors are also likely affected, with Zen4 unknown!"
> echo "If you have an AMD CPU, you likely shouldn't use this!"
> echo "----------------------------------------------------------------------------"
45a51,57
> SET_PIN_ARG=""
> read -p "Would you like to set a pin? " -n 1 -r
> echo
> if [[ $REPLY =~ ^[Yy]$ ]]; then
> SET_PIN_ARG=" --tpm2-with-pin=yes "
> fi
>
66c78
< systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 "$CRYPT_DISK"
78c78
< systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 "$SET_PIN_ARG" "$CRYPT_DISK"
---
> systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7+14 "$SET_PIN_ARG" "$CRYPT_DISK"