3 Commits

Author	SHA1	Message	Date
Richard Hughes	0a57b90d75	uefi: More carefully check the output from tpm2_pcrlist ... Otherwise we can get a PCR0 of 'getcapability:getpcrallocationstatuserror'...	2019-03-27 14:18:19 -04:00
Richard Hughes	b768e4d924	Do not fail to start the daemon if tpm2_pcrlist hangs ... In some situations SELinux prevents fwupd from executing tpm2_pcrlist, but the failure mode is that the process just hangs and never completes. This causes systemd to time out the fwupd daemon startup and then errors to be shown in GNOME Software. To prevent this happening, add an optional timeout argument to fu_common_spawn_sync() and cancel the subprocess if it takes longer than this to complete. See https://bugzilla.redhat.com/show_bug.cgi?id=1665701 for details.	2019-02-26 14:27:13 +00:00
Richard Hughes	b56015ed3f	uefi: Add the PCR0 value as the device checksum for system firmware ... We can't actually access the UEFI ROM from userspace, but the PCR0 is a hash built from the ROM itself. We could use this value to ensure the firmware has been written correctly, and that the PCR0 matches the expected value specified in the metadata.	2018-12-14 19:23:04 +00:00