extend PCR 4 in a recovery to prevent disk key decryption (issue #154)

This commit is contained in:
Trammell Hudson 2017-04-03 10:30:03 -04:00
parent 174bb64957
commit e41e21084a
Failed to extract signature

View File

@ -8,7 +8,7 @@
recovery() {
echo >&2 "!!!!! $@"
rm -f /tmp/secret.key
tpm extend -ix 4 -if recovery
tpm extend -ix 4 -ic recovery
echo >&2 "!!!!! Starting recovery shell"
exec /bin/ash