sd-boot: measure kernel cmdline into PCR 12 rather than 8
authorLennart Poettering <lennart@poettering.net>
Wed, 16 Mar 2022 09:51:03 +0000 (10:51 +0100)
committerLennart Poettering <lennart@poettering.net>
Wed, 16 Mar 2022 16:44:32 +0000 (17:44 +0100)
commit4d32507f5186a89e98093659fbbe386787a97b9f
treee2db7d0dbb81dadfc081f46733246eb09172f978
parent34604d6af70bc719eb338c0115ebdfdc5439ed1b
sd-boot: measure kernel cmdline into PCR 12 rather than 8

Apparently Grub is measuring all kinds of garbage into PCR 8. Since people
apparently chainload sd-boot from grub, let's thus stay away from PCR 8,
and use PCR 12 instead for the kernel command line.

As discussed here: #22635

Fixes: #22635
meson_options.txt
src/boot/efi/cpio.c
src/boot/efi/cpio.h
src/boot/efi/measure.c
src/boot/efi/measure.h
src/boot/efi/meson.build
src/boot/efi/stub.c
src/boot/efi/util.h