update TODO

This commit is contained in:
Lennart Poettering 2023-07-12 22:27:12 +02:00
parent 608aa606cf
commit dbc62e590a

6
TODO
View file

@ -528,9 +528,9 @@ Features:
intervals, validate the journal against current TPM state with that. (taking
inspiration from IMA log)
* provide an API to apps to encrypt/decrypt credentials. usecase: allow
bluez bluetooth daemon to pass pairings to initrd that way, without shelling
out to our tools.
* provide an API (probably IPC) to apps to encrypt/decrypt
credentials. usecase: allow bluez bluetooth daemon to pass pairings to initrd
that way, without shelling out to our tools.
* revisit default PCR bindings in cryptenroll and systemd-creds. Currently they
use PCR 7 which should contain secureboot state db/dbx. Which sounded like a