(oddlama.org)

212 points arjvik | 1 comments | 17 Jan 25 03:00 UTC | HN request time: 0.205s | source

1. kukrimate ◴[25 Jan 25 13:10 UTC] No.42821434[source]▶

Why does the initrd have to keep the PCRs the same after handing off to the root filesystem anyhow?

Capping off the PCRs with any arbitrary value before execing into root would stop this.

Bypassing disk encryption on systems with automatic TPM2 unlock