On Sat, 2026-08-22 at 01:15 +0100, Julian Braha wrote: > The IMA_MEASURE_PCR_IDX option is not visible for users to set, so it > always uses its default, 10. This means that the 'range 8 14' is dead > code, and the "If unsure, use the default 10" in the help text is > misleading because the user *has no other choice*. > > During the first patch submission to add this option in 2008 [1], > the submitter originally gave this option a prompt: > > "PCR for Aggregate (8 <= Index <= 14)" > > then later removed it in the revision, without adjusting the rest of the > option accordingly [2]. > > Let's clean up this of this IMA_MEASURE_PCR_IDX config option to be > consistent with its current, non-visible state. > > This dead range was found by kconfirm, a static analysis tool for Kconfig. > > Signed-off-by: Julian Braha <[email protected]>
The PCR index can be specified as a Kconfig IMA_MEASURE_PCR_IDX and on individual policy records via the "pcr=" option. Mimi
