commit | b03b2a45f9f07bdfb0074adf9c8b4339080a7def | [log] [tgz] |
---|---|---|
author | Heinrich Schuchardt <heinrich.schuchardt@canonical.com> | Tue Sep 17 10:49:29 2024 +0200 |
committer | Tom Rini <trini@konsulko.com> | Wed Oct 09 22:04:56 2024 -0600 |
tree | 02a2f3cbbb56dc29801d418a571a7219bb21c35f | |
parent | 93b9cd792089e536f2bfa85d9903fd4798209f76 [diff] |
efi_leader: delete rng-seed if having EFI RNG protocol For measured be boot we must avoid any volatile values in the device-tree. We already delete /chosen/kaslr-seed if we provide and EFI RNG protocol. Additionally remove /chosen/rng-seed provided by QEMU or U-Boot. Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org> Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>