rhboot / shim

UEFI shim loader
Other
861 stars 291 forks source link

Incomplete MokListTrusted measurment in binary_bios_measurements #492

Closed GastonMeghi closed 1 year ago

GastonMeghi commented 2 years ago

I'm trying to do boot measurements on RHEL8 machines. And I'm having issues with the following Event in the binary_bios_measurements:

Please correct me if I'm wrong but I thinks that as in TCG PC Client PlatformFirmware ProfileSpecification page 54, since the event type is a EV_EFI_VARIABLE_AUTHORITY the UEFI_VARIABLE_DATA.VariableData should be the EFI_SIGNATURE_DATA value from the EFI_SIGNATURE_LIST that contained the authority that was used to validate the image. And in this boot measurement the VariableData is just "01".

Really appreciate your support on this!