Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WiP: Improve checksum verification upon totp unseal errors #1508

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from

Commits on Oct 11, 2023

  1. WiP: Improve checksum verification upon totp unseal errors

    Raw notes:
    - Writing multi-line output to /dev/kmsg didn't work. We now output one line of message in DEBUG calls
    - When TOTP unseal errors happened, the use needed to also sign /boot without knowing if things were right.
      - Now integrity report is given
       - If gpg detached signature or hashes are invalid, we give the user a detailed report of hashes being different is detaches signature is good
    - There were multiple instances of verify_global_hashes
      - The one from gui-init has been moved to etc/functions, and calls requiring to update the hashes now pass optional parameter
    - Are some /tmp/hash_output relevance missed somewhere?
    
    What should be improved further?
    tlaurion committed Oct 11, 2023
    Configuration menu
    Copy the full SHA
    16e1ecb View commit details
    Browse the repository at this point in the history