|
1 | 1 | # shell scripts in the tree |
2 | | -sbin/safeboot usr/sbin/ |
3 | | -sbin/safeboot-tpm-unseal usr/sbin/ |
4 | | -sbin/tpm2-attest usr/sbin/ |
5 | | -sbin/tpm2-pcr-validate usr/sbin/ |
6 | | - |
7 | | -# configuration files and helper functions |
8 | | -safeboot.conf etc/safeboot/ |
9 | | -functions.sh etc/safeboot/ |
10 | | - |
11 | | -# TPM certs and a script to refresh them |
12 | | -tpm-certs.txt etc/safeboot/ |
13 | | -refresh-certs etc/safeboot/ |
14 | | -certs/* etc/safeboot/certs/ |
15 | | - |
16 | | -# Compiled with modifications from source |
17 | | -# to add support for the pkcs11 engine (sbsign), |
18 | | -# hostnames and small qrcodes (tpm2-totp), |
19 | | -# and bundle all tpm2 applications in a single script (tpm2) |
20 | | -bin/sbsign.safeboot usr/sbin/ |
21 | | -bin/sign-efi-sig-list.safeboot usr/sbin/ |
22 | | -bin/tpm2-totp usr/sbin/ |
23 | | -bin/tpm2 usr/sbin/ |
24 | | - |
25 | | -# scripts to interface with secure boot in the initramfs |
26 | | -initramfs/hooks/dmverity-root etc/initramfs-tools/hooks/ |
27 | | -initramfs/hooks/safeboot-hooks etc/initramfs-tools/hooks/ |
28 | | -initramfs/scripts/dmverity-root etc/initramfs-tools/scripts/local-premount/ |
29 | | -initramfs/scripts/blockdev-readonly etc/initramfs-tools/scripts/local-premount/ |
30 | | -initramfs/scripts/safeboot-bootmode etc/initramfs-tools/scripts/init-top/ |
| 2 | +sbin/attest-enroll usr/sbin/ |
| 3 | +sbin/attest-verify |
| 4 | +sbin/attest-server usr/sbin/ |
| 5 | +# XXX |
| 6 | +sbin/attest-server-sub.py usr/sbin/ |
| 7 | + |
| 8 | +# These are delivered by safeboot-attest-client for now until we split them up |
| 9 | +# sbin/tpm2-attest usr/sbin/ |
| 10 | +# sbin/tpm2-pcr-validate usr/sbin/ |
| 11 | + |
| 12 | +# libexec shell scripts |
| 13 | +sbin/gencert usr/libexec/safeboot/ |
| 14 | +sbin/genkeytab usr/libexec/safeboot/ |
0 commit comments