diff options
| author | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-17 15:05:36 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-17 15:05:36 +0100 |
| commit | dd45f3ad88b544f065f27143801306a7d6dffd02 (patch) | |
| tree | d0627a2a17e4b0e27a2b85cf714b16abc613e988 /etc/systemd/system/systemd-pcrlock-make-policy.service.d | |
| parent | 64f4695932ff4d27967cf4f0e854e40371dbcc90 (diff) | |
| download | dotfiles-dd45f3ad88b544f065f27143801306a7d6dffd02.tar.gz dotfiles-dd45f3ad88b544f065f27143801306a7d6dffd02.tar.bz2 dotfiles-dd45f3ad88b544f065f27143801306a7d6dffd02.zip | |
Maintain the approved PCR 7 unlock policy
Diffstat (limited to 'etc/systemd/system/systemd-pcrlock-make-policy.service.d')
| -rw-r--r-- | etc/systemd/system/systemd-pcrlock-make-policy.service.d/pcr7.conf | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/etc/systemd/system/systemd-pcrlock-make-policy.service.d/pcr7.conf b/etc/systemd/system/systemd-pcrlock-make-policy.service.d/pcr7.conf new file mode 100644 index 0000000..01a51a5 --- /dev/null +++ b/etc/systemd/system/systemd-pcrlock-make-policy.service.d/pcr7.conf @@ -0,0 +1,9 @@ +[Unit] +ConditionPathExists=/var/lib/systemd/pcrlock.json +ConditionPathExistsGlob=/var/lib/pcrlock.d/*-secureboot-policy.pcrlock.d/generated.pcrlock +ConditionPathExistsGlob=/var/lib/pcrlock.d/*-secureboot-authority.pcrlock.d/generated.pcrlock +RequiresMountsFor=/boot /var/lib/systemd /var/lib/pcrlock.d + +[Service] +ExecStart= +ExecStart=/usr/lib/systemd/systemd-pcrlock make-policy --pcr=7 --location=770 |