summaryrefslogtreecommitdiff
path: root/Makefile.am
diff options
context:
space:
mode:
authorHarald Hoyer <harald@redhat.com>2016-02-03 17:39:24 +0100
committerHarald Hoyer <harald@redhat.com>2016-02-11 17:48:09 +0100
commit92ed3bb49e460b11aa86c828083e36373ae039dd (patch)
treead3c240d26363c5bfdeb6d5809607b515b55fd18 /Makefile.am
parent462c0cc526358b53bbf9177583c3273d866fac1b (diff)
sd-boot: put hashed kernel command line in a PCR of the TPM
The UEFI BIOS already hashes the contents of the loaded image, so the initrd and the command line of the binary are recorded. Because manually added LoadOptions are not taken into account, these should be recorded also. This patch logs and extends a TPM PCR register with the LoadOptions. This feature can be enabled with configure --enable-tpm The PCR register index can be specified with configure --with-tpm-pcrindex=<NUM>
Diffstat (limited to 'Makefile.am')
-rw-r--r--Makefile.am4
1 files changed, 4 insertions, 0 deletions
diff --git a/Makefile.am b/Makefile.am
index 125319fe48..3fd204c3bb 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -2701,6 +2701,7 @@ systemd_boot_headers = \
src/boot/efi/console.h \
src/boot/efi/graphics.h \
src/boot/efi/pefile.h \
+ src/boot/efi/measure.h \
src/boot/efi/disk.h
systemd_boot_sources = \
@@ -2709,6 +2710,7 @@ systemd_boot_sources = \
src/boot/efi/graphics.c \
src/boot/efi/pefile.c \
src/boot/efi/disk.c \
+ src/boot/efi/measure.c \
src/boot/efi/boot.c
EXTRA_DIST += $(systemd_boot_sources) $(systemd_boot_headers)
@@ -2745,6 +2747,7 @@ stub_headers = \
src/boot/efi/disk.h \
src/boot/efi/graphics.h \
src/boot/efi/splash.h \
+ src/boot/efi/measure.h \
src/boot/efi/linux.h
stub_sources = \
@@ -2754,6 +2757,7 @@ stub_sources = \
src/boot/efi/graphics.c \
src/boot/efi/splash.c \
src/boot/efi/linux.c \
+ src/boot/efi/measure.c \
src/boot/efi/stub.c
EXTRA_DIST += \