flammit's fix: PCR5 should not be expected to be zeroed out since usb…

… modules should be loaded. Works.
tlaurion · Oct 30, 2018 · caad2f6 · caad2f6
1 parent 54eaba3
commit caad2f6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/initrd/bin/kexec-seal-key b/initrd/bin/kexec-seal-key
@@ -104,7 +104,7 @@ tpm sealfile2 \
 	-ix 2 X \
 	-ix 3 X \
 	-ix 4 0000000000000000000000000000000000000000 \
-	-ix 5 0000000000000000000000000000000000000000 \
+	-ix 5 X \
 	-ix 6 $luks_pcr \
 	-ix 7 X \
 || die "Unable to seal secret"