Daniel P. Berrangé 4b1153cfcc efi: don't pull kernel cmdline from SMBIOS in a confidential VM ...

In a confidential VM, the SMBIOS data is not trusted, as it is under the
control of the host OS/admin and not covered by attestation of the machine.

Fixes: https://github.com/systemd/systemd/issues/27604
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>

2023-07-14 14:18:09 +01:00

..

efi

efi: don't pull kernel cmdline from SMBIOS in a confidential VM

2023-07-14 14:18:09 +01:00

bless-boot-generator.c

generator: run various generators only run on the host, not in initrd

2023-07-04 23:15:36 +02:00

bless-boot.c

tree-wide: use -EBADF for fd initialization

2022-12-19 15:00:57 +01:00

boot-check-no-failures.c

basic: move version() to build.h+c

2022-11-08 13:41:14 +01:00

bootctl-install.c

tree-wide: start properly syncing at various places we so far didn't

2023-06-13 09:50:10 +02:00

bootctl-install.h

bootctl: split out "install" verb too

2022-12-19 12:08:02 +01:00

bootctl-random-seed.c

bootctl: warn if the ESP random seed is stored on a world-readable dir

2023-06-14 18:00:24 +02:00

bootctl-random-seed.h

bootctl: split out random seed verb, too

2022-12-19 11:43:19 +01:00

bootctl-reboot-to-firmware.c

bootctl: return 0 instead of EXIT_SUCCESS

2023-03-17 20:40:34 +09:00

bootctl-reboot-to-firmware.h

bootctl: let's start splitting up bootctl like we did for systemctl and others

2022-12-19 11:43:19 +01:00

bootctl-set-efivar.c

bootctl: split out "set-efivar" verbs, too

2022-12-19 12:06:33 +01:00

bootctl-set-efivar.h

bootctl: split out "set-efivar" verbs, too

2022-12-19 12:06:33 +01:00

bootctl-status.c

efi: add a bunch of reported EFI loader/stub feature flags

2023-07-05 17:54:59 +02:00

bootctl-status.h

bootctl: unlink and cleanup functions

2023-01-19 14:24:43 +01:00

bootctl-systemd-efi-options.c

bootctl: also split out 'systemd-efi-options' verb

2022-12-19 11:52:09 +01:00

bootctl-systemd-efi-options.h

bootctl: also split out 'systemd-efi-options' verb

2022-12-19 11:52:09 +01:00

bootctl-uki.c

kernel-image: make inspect_kernel() optionally take directory fd

2023-04-09 07:10:20 +02:00

bootctl-uki.h

bootctl: add kernel-inspect command

2023-01-18 14:32:14 +01:00

bootctl-util.c

tree-wide: "<n>bit" → "<n>-bit"

2023-07-02 11:10:12 +01:00

bootctl-util.h

bootctl: honor $KERNEL_INSTALL_CONF_ROOT

2023-01-10 15:17:07 +01:00

bootctl.c

NEWS/--help: correct/be clearer on bootclt -R vs. -RR

2023-07-04 12:50:22 +01:00

bootctl.h

find-esp: change "unprivileged_mode" parameter to be tristate

2023-05-31 10:12:47 +02:00

measure.c

boot: measure .sbat section

2023-06-30 17:17:56 +01:00

meson.build

meson: Do not include headers in source lists

2023-01-24 22:04:03 +01:00

pcrphase.c

tpm2: replace _cleanup_tpm2_* macros with _cleanup_()

2023-06-08 01:09:08 +02:00