shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-01-11 09:18:07 +03:00
Code

pid1: allowlist all tpm devices for a unit when encrypted creds are needed

Browse Source 
We might be configured to use some ther device than /dev/tpmrm0, hence
allow them all by allowlisting the tpm char device class as a whole.
This commit is contained in:
Lennart Poettering 2023-03-23 18:22:43 +01:00
parent 50a4217bbe
commit df637af460
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/core/unit.c
View File

@ -4217,7 +4217,7 @@ int unit_patch_contexts(Unit *u) {
/* If there are encrypted credentials we might need to access the TPM. */
if (exec_context_has_encrypted_credentials(ec)) {
r = cgroup_add_device_allow(cc, "/dev/tpmrm0", "rw");
r = cgroup_add_device_allow(cc, "char-tpm", "rw");
if (r < 0)
return r;
}