systemd/units/systemd-pcrlock.socket

#  SPDX-License-Identifier: LGPL-2.1-or-later
#
#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=Make TPM PCR Policy
Documentation=man:systemd-pcrlock(8)
DefaultDependencies=no
After=tpm2.target
Before=sockets.target
ConditionSecurity=measured-uki

[Socket]
ListenStream=/run/systemd/io.systemd.PCRLock
FileDescriptorName=varlink
SocketMode=0600
Accept=yes

[Install]
WantedBy=sockets.target
pcrlock: add basic Varlink interface This can be used to make or delete a PCR policy via Varlink. It can also be used to query the current event log in CEL format. 2024-02-02 22:17:09 +08:00			`# SPDX-License-Identifier: LGPL-2.1-or-later`
			`#`
			`# This file is part of systemd.`
			`#`
			`# systemd is free software; you can redistribute it and/or modify it`
			`# under the terms of the GNU Lesser General Public License as published by`
			`# the Free Software Foundation; either version 2.1 of the License, or`
			`# (at your option) any later version.`

			`[Unit]`
units: drop "(Varlink)" We generally don't specify the protocol implementation in unit descriptions. For journald, we have: $ git grep Description 'units/journald' units/systemd-journald-audit.socket:Description=Journal Audit Socket units/systemd-journald-dev-log.socket:Description=Journal Socket (/dev/log) units/systemd-journald-varlink@.socket:Description=Journal Varlink Socket for Namespace %i units/systemd-journald.service.in:Description=Journal Service units/systemd-journald.socket:Description=Journal Sockets units/systemd-journald@.service.in:Description=Journal Service for Namespace %i units/systemd-journald@.socket:Description=Journal Sockets for Namespace %i so we need to keep "Varlink" in the name. But also use "Sockets" (plural) for the "main" socket unit, since it opens multiple sockets. 2024-03-14 17:16:25 +08:00			`Description=Make TPM PCR Policy`
pcrlock: add basic Varlink interface This can be used to make or delete a PCR policy via Varlink. It can also be used to query the current event log in CEL format. 2024-02-02 22:17:09 +08:00			`Documentation=man:systemd-pcrlock(8)`
			`DefaultDependencies=no`
			`After=tpm2.target`
			`Before=sockets.target`
			`ConditionSecurity=measured-uki`

			`[Socket]`
			`ListenStream=/run/systemd/io.systemd.PCRLock`
			`FileDescriptorName=varlink`
			`SocketMode=0600`
			`Accept=yes`

			`[Install]`
			`WantedBy=sockets.target`