analyze: show pcrs also in sha384 bank
authorLennart Poettering <lennart@poettering.net>
Tue, 4 Jun 2024 09:02:34 +0000 (11:02 +0200)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Tue, 18 Jun 2024 18:41:01 +0000 (20:41 +0200)
SHA384 is pretty much the bank we actually *want* to use, since it's
faster to calculate than SHA256, hence at the very least, start
considering.

(cherry picked from commit acaca5ab250a51be6ba07768bee80bf0f7b462fa)

src/analyze/analyze-pcrs.c

index 43e415fc6df6e074020025ba99c881a434cf88f3..1c3da3fd8406a0e6e87530e731bd68ff7de071f2 100644 (file)
@@ -11,7 +11,7 @@
 static int get_pcr_alg(const char **ret) {
         assert(ret);
 
-        FOREACH_STRING(alg, "sha256", "sha1") {
+        FOREACH_STRING(alg, "sha256", "sha384", "sha1") {
                 _cleanup_free_ char *p = NULL;
 
                 if (asprintf(&p, "/sys/class/tpm/tpm0/pcr-%s/0", alg) < 0)