Robbie Harwood a4356538d0 commands/tpm: Don't propagate measurement failures to the verifiers layer ...

Currently if an EFI firmware fails to do a TPM measurement for a file,
the error will be propagated to the verifiers framework which will
prevent it to be opened. This mean that buggy firmwares will lead to
the system not booting because files won't be allowed to be loaded. But
a failure to do a TPM measurement isn't expected to be a fatal error
that causes the system to be unbootable.

To avoid this, don't return errors from .write and .verify_string
callbacks and just print a debug message in the case of a TPM
measurement failure. Add an environment variable, tpm_fail_fatal, to
restore the previous behavior.

Also-authored-by: Javier Martinez Canillas <javierm@redhat.com>
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

2022-11-14 17:30:53 +01:00

..

man

Implement syslinux parser.

2013-12-18 05:28:05 +01:00

autoiso.cfg

* docs/autoiso.cfg: New file.

2013-10-27 20:34:24 +01:00

fdl.texi

2008-03-01 Yoshinori K. Okuji <okuji@enbug.org>

2008-03-01 17:27:51 +00:00

font_char_metrics.png

GRUB developper manual based on existing Internals section and

2011-04-03 15:30:28 +02:00

font_char_metrics.txt

GRUB developper manual based on existing Internals section and

2011-04-03 15:30:28 +02:00

grub-dev.texi

docs: Fix spelling typo and remove unnecessary spaces

2022-05-24 14:43:13 +02:00

grub.cfg

* docs/grub.cfg: Update.

2012-05-04 00:30:15 +02:00

grub.texi

commands/tpm: Don't propagate measurement failures to the verifiers layer

2022-11-14 17:30:53 +01:00

Makefile.am

Fix make dist.

2012-02-28 12:58:57 +01:00

mdate-sh

2008-03-01 Yoshinori K. Okuji <okuji@enbug.org>

2008-03-01 17:27:51 +00:00

osdetect.cfg

* docs/osdetect.cfg: Add isolinux config to detected OSes.

2013-12-18 05:34:17 +01:00

texinfo.tex

remove all trailing whitespace

2009-06-10 21:04:23 +00:00