quine-global-labs/mirror-get-aurora-dev-common
1
0
Fork 0
mirror of https://github.com/get-aurora-dev/common.git synced 2026-11-03 21:49:43 -09:00
Code Issues Projects Releases Packages Wiki Activity

feat(security): bind TPM2 auto-unlock to PCRs 0+7 (#269)

Browse source 
* feat(security): bind TPM2 auto-unlock to PCRs 0+7

* feat(security): add PCR 14 to TPM2 auto-unlock policy

* Update system_files/shared/usr/bin/luks-tpm2-autounlock

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>

---------

Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
This commit is contained in:
Guilherme Cardoso 2026-08-31 20:31:05 +00:00 committed by GitHub
parent 792c80f8ee
commit 1a1d640689
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
system_files/shared/usr/bin/luks-tpm2-autounlock
View file

@ -40,6 +40,6 @@ case "${EXIT_CODE}" in
exit 0
esac
if sudo systemd-cryptenroll --wipe-slot=tpm2 --tpm2-device=auto --tpm2-pcrs='' ${SET_PIN_ARG} "${CRYPT_DISK}" ; then
if sudo systemd-cryptenroll --wipe-slot=tpm2 --tpm2-device=auto --tpm2-pcrs='0+7+14' ${SET_PIN_ARG} "${CRYPT_DISK}" ; then
echo "TPM2 LUKS auto-unlock configured for next reboot."
fi