On Friday, 05 April 2019 at 10:00, Petr Pisar wrote:
What's the point of encrypting /boot? All the executed bits from
(grub, kernel, and initramdisk) are measured by TPM. Thus if somebody
tampers them, root file system decryption that uses TPM will fail.
Not everyone has a TPM chip in their machine...
| RPM Fusion http://rpmfusion.org
There should be a science of discontent. People need hard times and
oppression to develop psychic muscles.
-- from "Collected Sayings of Muad'Dib" by the Princess Irulan