Gabríel Arthúr Pétursson 1923e21316 shared: Fix TPM2 unsealing when PCR values change ...

Recreate the encryption session on each retry. It's invalidated along
with the policy session when freed, failing subsequent retries.

	Unsealing HMAC key.
	WARNING:esys:src/tss2-esys/api/Esys_Unseal.c:295:Esys_Unseal_Finish() Received TPM Error
	ERROR:esys:src/tss2-esys/api/Esys_Unseal.c:98:Esys_Unseal() Esys Finish ErrorCode (0x00000128)
	A PCR value changed during the TPM2 policy session, restarting HMAC key unsealing (30 tries left).
	Missing encryption session
	Failed to unseal secret using TPM2: Invalid argument

Fixes #31881

2024-03-24 12:49:22 +00:00

..

ac-power

…

analyze

analyze: refuse --global dot/verify

2024-03-24 01:28:28 +08:00

ask-password

…

backlight

udev,backlight,kernel-install: reword sentences starting with "Skipping to"

2024-03-07 18:49:44 +01:00

basic

Drop unnecessary path_equal_ptr() wrapper

2024-03-23 13:21:06 +01:00

battery-check

tree-wide: use "_" rather than "-" as separator in kernel cmdline options

2024-02-28 15:33:51 +01:00

binfmt

…

boot

efi: check if all sections of our EFI binaries are properly aligned

2024-03-22 14:02:03 +01:00

busctl

busctl: don't hit an assert if we call invalid bus method names

2024-03-01 22:24:01 +01:00

cgls

…

cgroups-agent

…

cgtop

…

core

Merge pull request #31916 from YHNdnzj/socket-load-service

2024-03-24 11:43:37 +00:00

coredump

coredump: use free_and_strdup_warn() more

2024-03-20 15:18:21 +01:00

creds

Merge pull request #31721 from aafeijoo-suse/service-util-help-fix

2024-03-11 18:13:57 +00:00

cryptenroll

…

cryptsetup

…

debug-generator

…

delta

…

detect-virt

…

dissect

dissect-image: add flag for explicitly enabling userspace verity signature checking

2024-02-28 16:17:40 +01:00

environment-d-generator

constants: drop duplicated CONF_PATHS defines

2024-03-07 18:47:50 +01:00

escape

…

firstboot

stat-util: generalize is_* and verify_* handling

2024-03-04 19:53:51 +00:00

fsck

…

fstab-generator

Replace strdup_or_null() by strdup_to()

2024-03-20 15:18:21 +01:00

fundamental

…

fuzz

…

getty-generator

…

gpt-auto-generator

gpt-auto: ignore fstab_has_node failure

2024-03-11 15:34:05 +08:00

hibernate-resume

…

home

homework: Implement offline updates

2024-03-23 01:05:13 +00:00

hostname

hostnamed: use strdup_to_full()

2024-03-20 15:13:44 +01:00

hwdb

…

id128

…

import

fd-util: beef up fd_verify_safe_flags() features

2024-03-11 14:49:51 +01:00

initctl

…

integritysetup

…

journal

journalctl: make --until work again with --after-cursor and --lines

2024-03-21 04:43:45 +09:00

journal-remote

Merge pull request #30480 from keszybz/kernel-install-more-paths

2024-03-08 08:25:07 +01:00

kernel-install

Merge pull request #31862 from keszybz/add-strdup_to-helper

2024-03-21 14:47:05 +09:00

libsystemd

sd-journal/catalog: use strdup_to(), rename output param

2024-03-20 15:18:21 +01:00

libsystemd-network

sd-dhcp-server: also save the server address and netmask to the leases file

2024-03-15 04:15:10 +09:00

libudev

…

locale

various: use strdup_to() in various obvious cases

2024-03-20 15:13:44 +01:00

login

tree-wide: Add allow_pidfd argument to bus_append_scope_pidref()

2024-03-22 17:03:35 +01:00

machine

Merge pull request #31886 from DaanDeMeyer/logind

2024-03-24 19:19:12 +08:00

machine-id-setup

dissect-image: add flag for explicitly enabling userspace verity signature checking

2024-02-28 16:17:40 +01:00

modules-load

…

mount

…

network

network: set varlink description

2024-03-21 19:52:31 +09:00

notify

…

nspawn

Merge pull request #31886 from DaanDeMeyer/logind

2024-03-24 19:19:12 +08:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

env-util: rename getenv_bool_secure() → secure_getenv_bool()

2024-02-28 15:38:00 +01:00

nss-systemd

env-util: rename getenv_bool_secure() → secure_getenv_bool()

2024-02-28 15:38:00 +01:00

oom

oomd: use strdup_to() and RET_GATHER()

2024-03-20 15:18:21 +01:00

partition

src/partition: remove unnecessary uses of "make sure"

2024-03-14 11:15:55 +01:00

path

…

pcrextend

…

pcrlock

…

portable

Merge pull request #31808 from keszybz/sundry-cleanups

2024-03-16 01:40:56 +09:00

pstore

Merge pull request #30480 from keszybz/kernel-install-more-paths

2024-03-08 08:25:07 +01:00

quotacheck

quotacheck: store argv[*] in static var

2024-03-10 23:11:47 +08:00

random-seed

…

rc-local-generator

…

remount-fs

…

reply-password

…

resolve

Merge pull request #31862 from keszybz/add-strdup_to-helper

2024-03-21 14:47:05 +09:00

rfkill

…

rpm

rpm/macros: add %_kernel_install_dir

2024-02-29 21:38:03 +01:00

run

tree-wide: Add allow_pidfd argument to bus_append_scope_pidref()

2024-03-22 17:03:35 +01:00

run-generator

…

shared

shared: Fix TPM2 unsealing when PCR values change

2024-03-24 12:49:22 +00:00

shutdown

…

sleep

sleep: fix typo (sysupend -> suspend)

2024-03-08 01:10:10 +08:00

socket-activate

…

socket-proxy

…

ssh-generator

Merge pull request #31670 from CodethinkLabs/vmspawn/generate_ssh_keys

2024-03-22 16:28:03 +00:00

stdio-bridge

…

storagetm

…

sulogin-shell

…

sysctl

…

sysext

dissect-image: add flag for explicitly enabling userspace verity signature checking

2024-02-28 16:17:40 +01:00

system-update-generator

…

systemctl

path-lookup: rename lookup_paths_free -> _done

2024-03-07 02:01:57 +08:00

systemd

Merge pull request #31829 from keszybz/more-header-checks

2024-03-17 17:58:59 +00:00

sysupdate

tree-wide: drop custom formatting for print() help messages

2024-03-11 13:34:34 +01:00

sysusers

Drop unnecessary path_equal_ptr() wrapper

2024-03-23 13:21:06 +01:00

sysv-generator

path-lookup: rename lookup_paths_free -> _done

2024-03-07 02:01:57 +08:00

test

Drop unnecessary path_equal_ptr() wrapper

2024-03-23 13:21:06 +01:00

timedate

polkit: update the rest of bus_verify_polkit_async_full() calls to new flags parameter

2024-03-11 14:17:45 +00:00

timesync

Merge pull request #30480 from keszybz/kernel-install-more-paths

2024-03-08 08:25:07 +01:00

tmpfiles

Merge pull request #30480 from keszybz/kernel-install-more-paths

2024-03-08 08:25:07 +01:00

tpm2-setup

tpm2-setup: Add --graceful

2024-03-17 13:34:51 +01:00

tty-ask-password-agent

…

udev

udev: add assert for EVENT_RESULT_EXIT_STATUS_BASE (#31710)

2024-03-13 22:25:22 +09:00

ukify

ukify: really add default .sbat for UKIs

2024-03-12 11:36:08 +01:00

update-done

…

update-utmp

…

user-sessions

…

userdb

userbdb: pass log level from main daemon to worker

2024-02-28 12:42:06 +00:00

varlinkctl

…

vconsole

…

veritysetup

…

version

…

vmspawn

Merge pull request #31886 from DaanDeMeyer/logind

2024-03-24 19:19:12 +08:00

volatile-root

…

vpick

…

xdg-autostart-generator

strv: add helper to extend strv from both sides

2024-03-07 18:49:44 +01:00