display_pcrs() should include PCRS 8 - 9 as they are non-zeros on some systems. boot_aggregate may span PCRs 0 - 9 so check()'s info message should be fixed accordingly. Signed-off-by: Maurizio Drocco <maurizio.drocco@xxxxxxx> --- tests/boot_aggregate.test | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tests/boot_aggregate.test b/tests/boot_aggregate.test index 39bd058..8a5581f 100755 --- a/tests/boot_aggregate.test +++ b/tests/boot_aggregate.test @@ -81,12 +81,12 @@ swtpm_init() { # In VERBOSE mode, display the calculated TPM PCRs for the different banks. display_pcrs() { - local PCRMAX=7 + local PCRMAX=9 local banks=("sha1" "sha256") local i; for bank in "${banks[@]}"; do - echo "INFO: Displaying ${bank} TPM bank (PCRs 0 - 7)" + echo "INFO: Displaying ${bank} TPM bank (PCRs 0 - 9)" for i in $(seq 0 $PCRMAX); do rc=0 pcr=$("${TSSDIR}/tsspcrread" -halg "${bank}" -ha "${i}" -ns) @@ -107,7 +107,7 @@ display_pcrs() { # Verify that the last "boot_aggregate" record in the IMA measurement # list matches. check() { - echo "INFO: Calculating the boot_aggregate (PCRs 0 - 7) for multiple banks" + echo "INFO: Calculating the boot_aggregate (PCRs 0 - 9) for multiple banks" bootaggr=$(evmctl ima_boot_aggregate) if [ $? -ne 0 ]; then echo "${CYAN}SKIP: evmctl ima_boot_aggregate: $bootaggr${NORM}" -- 2.17.1