[Question] Why measurement not need rootfs hash?

virtee / sev-snp-measure

Calculate AMD SEV/SEV-ES/SEV-SNP measurement for confidential computing

Apache License 2.0

54 stars 15 forks source link

[Question] Why measurement not need rootfs hash? #35

Open zyairzy opened 8 months ago

zyairzy commented 8 months ago

I'm a freshman about AMD sev-snp, I want to know why measurement not need include rootfs hash? If there are some security hole when not include rootfs hash?

Can someone can help to explain it, thank U!

larrydewey commented 4 months ago

AMD-SNP does not perform a measurement of the file-system, which is why it is not needed for the measurement.