From: Pawel R. <paw...@in...> - 2022-08-31 13:29:42
|
changeset 7ab3f002cc04 in /hg/p/tboot/code details: http://hg.code.sf.net/p/tboot/code/code?cmd=changeset;node=7ab3f002cc04 description: Add deprecation warning for "agile" extend policy option As has been requested about 8 months ago by Alex Eydelberg, the "agile" option for extending policies will be deprecated to limit the use of TPM hashing algorithms. For now I'm only leaving a warning about soon deprecation of this option. Change definitely removing this option and making it go into default setting will appear around October this year. By chance also adding VS Code files into .hgignore for my own petty convenience... diffstat: .hgignore | 1 + tboot/common/cmdline.c | 3 +++ 2 files changed, 4 insertions(+), 0 deletions(-) diffs (21 lines): diff -r d3c68d34fad8 -r 7ab3f002cc04 .hgignore --- a/.hgignore Fri Aug 19 14:27:42 2022 +0200 +++ b/.hgignore Wed Aug 31 15:20:39 2022 +0200 @@ -50,3 +50,4 @@ ^utils/txt-parse_err$ ^cov-int/.*$ ^doxygen/.*$ +.vscode/ diff -r d3c68d34fad8 -r 7ab3f002cc04 tboot/common/cmdline.c --- a/tboot/common/cmdline.c Fri Aug 19 14:27:42 2022 +0200 +++ b/tboot/common/cmdline.c Wed Aug 31 15:20:39 2022 +0200 @@ -515,6 +515,9 @@ } if ( tb_strcmp(extpol, "agile") == 0 ) { + printk(TBOOT_WARN"Warning: \"agile\" selected in extpol, " + "this option is set to be deprecated\n" + "(see tboot-devel mailing list archive)\n"); tpm->extpol = TB_EXTPOL_AGILE; tpm->cur_alg = TB_HALG_SHA256; } else if ( tb_strcmp(extpol, "embedded") == 0 ) { |