Lena
bf194cbcc9
sbctl.8: fix typo in the man page
...
The RSA key size is 4096, not 4098.
2024-08-05 18:46:33 +02:00
Morten Linderud
147d522bfe
sbctl: fixup docs and some comments
...
The man page still had some /usr/share mentions
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-08-05 15:26:08 +02:00
Morten Linderud
48a3109c7f
sbctl: include db_additions inn config file
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-31 23:40:06 +02:00
Morten Linderud
f1e8535986
Deprecation notice for bundles
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-31 12:03:29 +02:00
Morten Linderud
bdf2c637d5
Implement support for TPM key files
...
Support TPM TSS2 key files for signing secure boot things
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-31 00:14:26 +02:00
Morten Linderud
b969902d44
sbctl: setup debug logging
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-29 22:17:13 +02:00
Morten Linderud
c9d25391a9
sbctl: implement landlock sandboxing
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-29 21:30:46 +02:00
Morten Linderud
10204e8716
sbctl.8: add config file and mention the new paths
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-28 13:21:21 +02:00
Morten Linderud
19f201f90c
sbctl.8: mention the new --setup switch
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-28 13:21:10 +02:00
Morten Linderud
c7ffaf0c63
sbctl.8: fix some typesetting issues
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-28 13:19:49 +02:00
Morten Linderud
ddfa5c4ab3
sbctl: add manpage for sbctl.conf
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-07-24 21:15:33 +02:00
Morten Linderud
78476facea
docs: Add man page for new command
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-05-08 22:46:23 +02:00
cd CreepArghhh_
127bf28e23
Add Option ROM warning to Usage section of the manpage
...
The text in the usage section did not mention that some firmware might need Microsoft certificates as well, so I copied pasted it from a section above.
Some `$`s were also changed to `#`s to indicate that they should be run as root.
2024-04-24 06:30:30 +00:00
Morten Linderud
0ef7b8f04c
Added man page for list-enrolled-keys
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2024-04-22 20:00:00 +02:00
Trey Blancher
c01ac5e21b
Fixed typo, removed mention enroll-keys enables Secure Boot automatically
2023-12-17 17:56:06 -05:00
Morten Linderud
ff5369185b
revert dbx enrollment
...
Needs to be iterated on, and preferably not work as the existing key
databases.
Reverts: 31c1228c15
Reverts: dae25b8abd
Signed-off-by: Morten Linderud <morten@linderud.pw >
2023-11-19 19:00:21 +01:00
Luke Kuzmish
c5f71299be
update manpage docs
2023-11-11 06:51:30 -05:00
Cornelius Hoffmann
21a3c7e957
Update documentation for custom dbx
...
The support was introduced in dae25b8 without documentation, since dbx
was not mentioned at all in the manpage/news at that point in time.
2023-10-23 12:17:45 +02:00
Fabian Wienand
954cb8e9cc
add documentation for the extra flags of enroll/rotate/reset
...
Signed-off-by: Fabian Wienand <fabian.wienand@9elements.com >
2023-09-20 12:02:35 +02:00
Morten Linderud
b35e74e2cb
Implement full support for loading builtin firmware certificates
...
Signed-off-by: Morten Linderud <morten@linderud.pw >
2023-06-25 15:13:18 +02:00
Morten Linderud
4e033e284f
enroll-keys: implement --export
...
Export the keys we intend to enroll as .auth or .esl files
Signed-off-by: Morten Linderud <morten@linderud.pw >
2023-06-18 15:30:29 +02:00
Cornelius Hoffmann
c96abdb87f
Allow enrolling custom db and KEK certs
2023-05-11 16:44:56 +02:00
Morten Linderud
dcdc703aa9
verify: Implement file verification
...
Fixes https://github.com/Foxboron/sbctl/issues/163
2022-12-15 23:21:08 +01:00
Morten Linderud
af36eca1bc
rotate-keys: Implement rotate-keys
2022-12-11 20:05:24 +01:00
Patrik Tesarik
0849db96d3
Fix typos and some improve grammar a bit
...
Signed-off-by: Patrik Tesarik <mail@patrik-tesarik.de >
2022-12-05 16:24:21 +01:00