Add GRUB's PCR Usage to README.tpm

This didn't seem to get documented anywhere, and this is as good a place as any.
Upstream-commit-id: 4fab7281a8c
This commit is contained in:
Peter Jones 2018-08-01 09:58:09 -05:00
parent 956717e2b3
commit bd97e72f04

View File

@ -19,6 +19,15 @@ PCR7:
- MokSBState will be extended into PCR7 if it is set, logged as
"MokSBState".
PCR8:
- If you're using the grub2 TPM patchset we cary in Fedora, the kernel command
line and all grub commands (including all of grub.cfg that gets run) are
measured into PCR8.
PCR9:
- If you're using the grub2 TPM patchset we cary in Fedora, the kernel,
initramfs, and any multiboot modules loaded are measured into PCR9.
PCR14:
- MokList, MokListX, and MokSBState will be extended into PCR14 if they are
set.