• Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-10.0.beta
    • clevis
    • None
    • None
    • sst_security_special_projects
    • ssg_security
    • None
    • False
    • Hide

      None

      Show
      None
    • No
    • Red Hat Enterprise Linux
    • None
    • Unspecified Release Note Type - Unknown
    • None

      For RHEL 10, Make clevis-pin-tpm2 required by clevis, so it gets used as default pin.

      Rationale: clevis-pin-tpm2 is a newer/rewritten tpm2 pin that supports tpm2 authorized policies (although for this it needs a signing tool that is not part of Fedora/RHEL yet).

      The change consists in adding a Requires: clevis-pin-tpm2 to the clevis spec file, making it required. Being available, clevis will use it as the tpm2 pin.

      AC: make sure clevis includes clevis-pin-tpm2 as a dependency.

            sarroutb@redhat.com Sergio Arroutbi
            scorreia@redhat.com Sergio Correia
            Sergio Correia Sergio Correia
            SSG Security QE SSG Security QE
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated: