lanzaboote/rust/tool/src
Alois Wohlschlager 3885f114a8
Do not sign the kernel
Malicious boot loader specification entries could be used to make a
signed kernel load arbitrary unprotected initrds. Since we do not want
this, do not sign the kernel. This way, the only things allowed to boot
are our UKI stubs, which do verify the initrd.
2023-01-31 18:25:27 +01:00
..
cli.rs tool: write systemd-boot loader.conf 2023-01-29 16:19:14 +01:00
esp.rs tool: write systemd-boot loader.conf 2023-01-29 16:19:14 +01:00
gc.rs treewide: fix typos 2023-01-21 10:27:34 +01:00
generation.rs treewide: fix typos 2023-01-21 10:27:34 +01:00
install.rs Do not sign the kernel 2023-01-31 18:25:27 +01:00
main.rs tool: make systemd version parsing robust 2023-01-26 21:30:44 +01:00
os_release.rs Make the os-release parser more precise 2023-01-30 11:46:48 +01:00
pe.rs tool: smarter systemd-boot install 2023-01-25 22:21:14 +01:00
signature.rs tool: smarter systemd-boot install 2023-01-25 22:21:14 +01:00
systemd.rs tool: make systemd version parsing robust 2023-01-26 21:30:44 +01:00
utils.rs tool: add SecureTempDirExt 2023-01-21 16:26:17 +01:00