dasharo/open-source-firmware-validation
0
0
Fork 0
mirror of https://github.com/Dasharo/open-source-firmware-validation.git synced 2026-06-13 10:16:18 -07:00
Code Issues Packages Projects Releases Wiki Activity

tpm.robot: Add explanation for PCR10 reconstruction fail being acceptable

Browse Source 
Co-authored-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Filip Gołaś <filip.golas@3mdeb.com>
This commit is contained in:
Filip Gołaś
2026-02-14 20:39:57 +01:00
co-authored by Sergii Dmytruk
parent 58afda7360
commit 72e18b0936
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/tpm.robot
+6
View File
@@ -5,6 +5,12 @@ Library String
*** Variables ***
# Reconstruction of these PCRs is not critical. I.e. if their value fails to be
# reconstructed from the TPM log, it's expected, or is not a firmware issue.
# - 10:
# - this PCR is not supposed to be extended by firmware
# - it's the default PCR used by IMA implementation in Linux, which uses a separate log for its measurements
# - if compiled into the kernel, IMA cannot be completely disabled at runtime
@{ACCEPTABLE_PCR_FAILS}= 10