# SOME DESCRIPTIVE TITLE # Copyright (C) YEAR Free Software Foundation, Inc. # This file is distributed under the same license as the PACKAGE package. # FIRST AUTHOR , YEAR. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "POT-Creation-Date: 2024-06-01 06:28+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "Language: \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #. type: TH #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid "SYSTEMD\\&.PCRLOCK" msgstr "" #. type: TH #: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "systemd 255" msgstr "" #. type: TH #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid "systemd.pcrlock" msgstr "" #. ----------------------------------------------------------------- #. * MAIN CONTENT STARTS HERE * #. ----------------------------------------------------------------- #. type: SH #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid "NAME" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "systemd.pcrlock, systemd.pcrlock.d - PCR measurement prediction files" msgstr "" #. type: SH #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid "SYNOPSIS" msgstr "" #. type: Plain text #: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "" "/etc/pcrlock\\&.d/*\\&.pcrlock\n" "/etc/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock\n" "/run/pcrlock\\&.d/*\\&.pcrlock\n" "/run/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock\n" "/var/lib/pcrlock\\&.d/*\\&.pcrlock\n" "/var/lib/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock\n" "/usr/local/pcrlock\\&.d/*\\&.pcrlock\n" "/usr/local/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock\n" "/usr/lib/pcrlock\\&.d/*\\&.pcrlock\n" "/usr/lib/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock\n" msgstr "" #. type: SH #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid "DESCRIPTION" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "" "*\\&.pcrlock files define expected TPM2 PCR measurements of components " "involved in the boot process\\&. B(1) uses such pcrlock " "files to analyze and predict TPM2 PCR measurements\\&. The pcrlock files are " "JSON arrays that follow a subset of the \\m[blue]B\\m[]\\&\\s-2\\u[1]\\d\\s+2 specification\\&. Specifically " "the \"recnum\", \"content\", and \"content_type\" record fields are not used " "and ignored if present\\&. Each pcrlock file defines one set of expected, " "ordered PCR measurements of a specific component of the boot\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "*\\&.pcrlock files may be placed in various \\&.d/ drop-in directories (see " "above for a full list)\\&. All matching files discovered in these " "directories are sorted alphabetically by their file name (without taking the " "actual directory they were found in into account): pcrlock files with " "alphabetically earlier names are expected to cover measurements done before " "those with alphabetically later names\\&. In order to make positioning " "pcrlock files in the boot process convenient the files are expected (by " "convention, this is not enforced) to be named \"I-I\\&." "pcrlock\" (where I is a three-digit decimal number), for example 750-" "enter-initrd\\&.pcrlock\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "For various components of the boot process more than one alternative pcrlock " "file shall be supported (i\\&.e\\&. \"variants\")\\&. For example to cover " "multiple kernels installed in parallel in the access policy, or multiple " "versions of the boot loader\\&. This can be done by placing *\\&.pcrlock\\&." "d/*\\&.pcrlock in the drop-in dirs, i\\&.e\\&. a common directory for a " "specific component, that contains one or more pcrlock files each covering " "one I of the component\\&. Example: 650-kernel\\&.pcrlock\\&." "d/6\\&.5\\&.5-200\\&.fc38\\&.x86_64\\&.pcrlock and 650-kernel\\&.pcrlock\\&." "d/6\\&.5\\&.7-100\\&.fc38\\&.x86_64\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "Use B to list all pcrlock files currently " "installed\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "Use the various B commands of B to automatically " "generate suitable pcrlock files for various types of resources\\&." msgstr "" #. type: SH #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid "WELL-KNOWN COMPONENTS" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "Components of the boot process may be defined freely by the administrator or " "OS vendor\\&. The following components are well-known however, and are " "defined by systemd\\&. The list below is useful for ordering local pcrlock " "files properly against these components of the boot\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "240-secureboot-policy\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The SecureBoot policy, as recorded to PCR 7\\&. May be generated via " "B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "Added in version 255\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "250-firmware-code-early\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "" "Firmware code measurements, as recorded to PCR 0 and 2, up to the separator " "measurement (see 400-secureboot-separator\\&.pcrlock below)\\&. May be " "generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "250-firmware-config-early\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "" "Firmware configuration measurements, as recorded to PCR 1 and 3, up to the " "separator measurement (see 400-secureboot-separator\\&.pcrlock below)\\&. " "May be generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "350-action-efi-application\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The EFI \"Application\" measurement done once by the firmware\\&. Statically " "defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "400-secureboot-separator\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The EFI \"separator\" measurement on PCR 7 done once by the firmware to " "indicate where firmware control transitions into boot loader/OS control\\&. " "Statically defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "500-separator\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The EFI \"separator\" measurements on PCRs 0-6 done once by the firmware to " "indicate where firmware control transitions into boot loader/OS control\\&. " "Statically defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "550-firmware-code-late\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "" "Firmware code measurements, as recorded to PCR 0 and 2, after the separator " "measurement (see 400-secureboot-separator\\&.pcrlock above)\\&. May be " "generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "550-firmware-config-late\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "" "Firmware configuration measurements, as recorded to PCR 1 and 3, after the " "separator measurement (see 400-secureboot-separator\\&.pcrlock above)\\&. " "May be generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "600-gpt\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The GPT partition table of the booted medium, as recorded to PCR 5 by the " "firmware\\&. May be generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "620-secureboot-authority\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The SecureBoot authority, as recorded to PCR 7\\&. May be generated via " "B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "700-action-efi-exit-boot-services\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "" "The EFI action generated when B is generated, i\\&.e\\&. " "when the UEFI environment is left and the OS takes over\\&. Covers the PCR 5 " "measurement\\&. Statically defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "710-kernel-cmdline\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The kernel command line, as measured by the Linux kernel to PCR 9\\&. May be " "generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "720-kernel-initrd\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The kernel initrd, as measured by the Linux kernel to PCR 9\\&. May be " "generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "750-enter-initrd\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The measurement to PCR 11 B(8) makes when " "the initrd initializes\\&. Statically defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "800-leave-initrd\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The measurement to PCR 11 B(8) makes when " "the initrd finishes\\&. Statically defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "820-machine-id\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The measurement to PCR 15 B(8) makes at boot, " "covering /etc/machine-id contents\\&. May be generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "830-root-file-system\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The measurement to PCR 15 B(8) makes at boot, " "covering the root file system identity\\&. May be generated via B\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "850-sysinit\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The measurement to PCR 11 B(8) makes when " "the main userspace did basic initialization and will now proceed to start " "regular system services\\&. Statically defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "900-ready\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The measurement to PCR 11 B(8) makes when the " "system fully booted up\\&. Statically defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "950-shutdown\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The measurement to PCR 11 B(8) makes when the " "system begins shutdown\\&. Statically defined\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "990-final\\&.pcrlock" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "The measurement to PCR 11 B(8) makes when " "the system is close to finishing shutdown\\&. Statically defined\\&." msgstr "" #. type: SH #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid "SEE ALSO" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "B(1), B(1)" msgstr "" #. type: SH #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid "NOTES" msgstr "" #. type: IP #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed #, no-wrap msgid " 1." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "TCG Canonical Event Log Format (CEL-JSON)" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "\\%https://trustedcomputinggroup.org/resource/canonical-event-log-format/" msgstr "" #. type: TH #: debian-unstable fedora-rawhide #, no-wrap msgid "systemd 256~rc3" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/etc/pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/etc/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/run/pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/run/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/var/lib/pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/var/lib/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/usr/local/pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/usr/local/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/usr/lib/pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "/usr/lib/pcrlock\\&.d/*\\&.pcrlock\\&.d/*\\&.pcrlock" msgstr "" #. type: Plain text #: fedora-40 msgid "" "*\\&.pcrlock files define expected TPM2 PCR measurements of components " "involved in the boot process\\&. B(1) uses such pcrlock " "files to analyze and predict TPM2 PCR measurements\\&. The pcrlock files are " "JSON arrays that follow a subset of the \\m[blue]B\\m[]\\&\\s-2\\u[1]\\d\\s+2 specification\\&. Specifically " "the \"recnum\", \"content\", and \"content_type\" record fields are not used " "and ignored if present\\&. Each pcrlock file defines one set of expected, " "ordered PCR measurements of a specific component of the boot\\&." msgstr "" #. type: Plain text #: fedora-40 msgid "" "Firmware code measurements, as recorded to PCR 0 and 2, up to the separator " "measurement (see 400-secureboot-separator\\&.pcrlock\\&. below)\\&. May be " "generated via B\\&." msgstr "" #. type: Plain text #: fedora-40 msgid "" "Firmware configuration measurements, as recorded to PCR 1 and 3, up to the " "separator measurement (see 400-secureboot-separator\\&.pcrlock\\&. " "below)\\&. May be generated via B\\&." msgstr "" #. type: Plain text #: fedora-40 msgid "" "Firmware code measurements, as recorded to PCR 0 and 2, after the separator " "measurement (see 400-secureboot-separator\\&.pcrlock\\&. above)\\&. May be " "generated via B\\&." msgstr "" #. type: Plain text #: fedora-40 msgid "" "Firmware configuration measurements, as recorded to PCR 1 and 3, after the " "separator measurement (see 400-secureboot-separator\\&.pcrlock\\&. " "above)\\&. May be generated via B\\&." msgstr "" #. type: Plain text #: fedora-40 msgid "" "The EFI action generated when B is generated, i\\&.e\\&. " "the UEFI environment is left and the OS takes over\\&. Covers the PCR 5 " "measurement\\&. Statically defined\\&." msgstr "" #. type: Plain text #: fedora-40 msgid "TCG Common Event Log Format (CEL-JSON)" msgstr ""