Skip to content

Incomplete MokListTrusted measurment in binary_bios_measurements  #492

@GastonMeghi

Description

@GastonMeghi

I'm trying to do boot measurements on RHEL8 machines. And I'm having issues with the following Event in the binary_bios_measurements:

  • EventNum: 27
    PCRIndex: 7
    EventType: EV_EFI_VARIABLE_AUTHORITY
    DigestCount: 3
    Digests:
    • AlgorithmId: sha1
      Digest: "3efeb87af48ab5aee7fcbd3514bab719ed865c1c"
    • AlgorithmId: sha256
      Digest: "5f62a2107fa11ce0485fd252d2e6c603cb8ed075861f9513bfed0a26bf6ed62b"
    • AlgorithmId: sha384
      Digest: "841b29f5200c91e1a02e64a6636587bac5b85496a67e6d3c3cf52415a7ab726b4d2259134d84e9082191ac8ee15b7890"
      EventSize: 61
      Event:
      VariableName: 605dab50-e046-4300-abb6-3dd810dd8b23
      UnicodeNameLength: 14
      VariableDataLength: 1
      UnicodeName: MokListTrusted
      VariableData: "01"

Please correct me if I'm wrong but I thinks that as in TCG PC Client PlatformFirmware ProfileSpecification page 54, since the event type is a EV_EFI_VARIABLE_AUTHORITY the UEFI_VARIABLE_DATA.VariableData should be the EFI_SIGNATURE_DATA value
from the EFI_SIGNATURE_LIST that contained the authority that was used to validate the image. And in this boot measurement the VariableData is just "01".

Really appreciate your support on this!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions