54 Commits

Author SHA1 Message Date
Lena
bf194cbcc9 sbctl.8: fix typo in the man page
The RSA key size is 4096, not 4098.
2024-08-05 18:46:33 +02:00
Morten Linderud
147d522bfe sbctl: fixup docs and some comments
The man page still had some /usr/share mentions

Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-08-05 15:26:08 +02:00
Morten Linderud
48a3109c7f sbctl: include db_additions inn config file
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-31 23:40:06 +02:00
Morten Linderud
f1e8535986 Deprecation notice for bundles
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-31 12:03:29 +02:00
Morten Linderud
bdf2c637d5 Implement support for TPM key files
Support TPM TSS2 key files for signing secure boot things

Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-31 00:14:26 +02:00
Morten Linderud
b969902d44 sbctl: setup debug logging
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-29 22:17:13 +02:00
Morten Linderud
c9d25391a9 sbctl: implement landlock sandboxing
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-29 21:30:46 +02:00
Morten Linderud
10204e8716 sbctl.8: add config file and mention the new paths
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-28 13:21:21 +02:00
Morten Linderud
19f201f90c sbctl.8: mention the new --setup switch
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-28 13:21:10 +02:00
Morten Linderud
c7ffaf0c63 sbctl.8: fix some typesetting issues
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-28 13:19:49 +02:00
Morten Linderud
ddfa5c4ab3 sbctl: add manpage for sbctl.conf
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-24 21:15:33 +02:00
Morten Linderud
78476facea docs: Add man page for new command
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-05-08 22:46:23 +02:00
cd CreepArghhh_
127bf28e23 Add Option ROM warning to Usage section of the manpage
The text in the usage section did not mention that some firmware might need Microsoft certificates as well, so I copied pasted it from a section above.

Some `$`s were also changed to `#`s to indicate that they should be run as root.
2024-04-24 06:30:30 +00:00
Morten Linderud
0ef7b8f04c Added man page for list-enrolled-keys
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-04-22 20:00:00 +02:00
Trey Blancher
c01ac5e21b Fixed typo, removed mention enroll-keys enables Secure Boot automatically 2023-12-17 17:56:06 -05:00
Morten Linderud
ff5369185b revert dbx enrollment
Needs to be iterated on, and preferably not work as the existing key
databases.

Reverts: 31c1228c15
Reverts: dae25b8abd

Signed-off-by: Morten Linderud <morten@linderud.pw>
2023-11-19 19:00:21 +01:00
Luke Kuzmish
c5f71299be update manpage docs 2023-11-11 06:51:30 -05:00
Cornelius Hoffmann
21a3c7e957 Update documentation for custom dbx
The support was introduced in dae25b8 without documentation, since dbx
was not mentioned at all in the manpage/news at that point in time.
2023-10-23 12:17:45 +02:00
Fabian Wienand
954cb8e9cc add documentation for the extra flags of enroll/rotate/reset
Signed-off-by: Fabian Wienand <fabian.wienand@9elements.com>
2023-09-20 12:02:35 +02:00
Morten Linderud
b35e74e2cb Implement full support for loading builtin firmware certificates
Signed-off-by: Morten Linderud <morten@linderud.pw>
2023-06-25 15:13:18 +02:00
Morten Linderud
4e033e284f enroll-keys: implement --export
Export the keys we intend to enroll as .auth or .esl files

Signed-off-by: Morten Linderud <morten@linderud.pw>
2023-06-18 15:30:29 +02:00
Cornelius Hoffmann
c96abdb87f Allow enrolling custom db and KEK certs 2023-05-11 16:44:56 +02:00
Morten Linderud
dcdc703aa9 verify: Implement file verification
Fixes https://github.com/Foxboron/sbctl/issues/163
2022-12-15 23:21:08 +01:00
Morten Linderud
af36eca1bc rotate-keys: Implement rotate-keys 2022-12-11 20:05:24 +01:00
Patrik Tesarik
0849db96d3 Fix typos and some improve grammar a bit
Signed-off-by: Patrik Tesarik <mail@patrik-tesarik.de>
2022-12-05 16:24:21 +01:00