Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't make shim abort when TPM log event fails (RHBZ #2002265) #414

Merged
merged 1 commit into from
Sep 13, 2021

Commits on Sep 13, 2021

  1. Don't make shim abort when TPM log event fails (RHBZ #2002265)

    On Dell hardware booted in UEFI with option TPM 1.2 "On without Pre-Boot
    Measurements", it appears that `tpm_log_event()` fails with Unsupported,
    which causes Shim to abort due to believing it couldn't set up the
    MokListRT, MokListXRT and SbatLevelRT variables.
    
    This patch ignore the error when trying to write to the TPM and sets the
    TPM as 'defective' to not try to write to it anymore.
    
    Signed-off-by: Renaud Métrich <rmetrich@redhat.com>
    rmetrich committed Sep 13, 2021
    Configuration menu
    Copy the full SHA
    355aaa8 View commit details
    Browse the repository at this point in the history