Skip to content

Bugfix to support unbound keyslot when sealing key#2046

Open
thedafidev wants to merge 2 commits intolinuxboot:masterfrom
thedafidev:bugfix-key-seal-unbound-keyslot
Open

Bugfix to support unbound keyslot when sealing key#2046
thedafidev wants to merge 2 commits intolinuxboot:masterfrom
thedafidev:bugfix-key-seal-unbound-keyslot

Conversation

@thedafidev
Copy link

Fix for #2045

Changes introduced:

  • unbound keyslots are now ignored (thanks to a new regex and sed command in kexec-seal-key)
  • if by any chance luksDump parsing founds non-numeric keyslot numbers, they get ignored

It's the first time I change heads source code so I'm not sure I did everything as I should

I tested the new regex and sed command against some luksDump outputs with the following command:

cat luks.txt | grep -E "^\s+([0-9]+):\s*luks2$" | sed "s/^\s\+\([0-9]\+\):\s*luks2$/\1/g"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant