tpmr: remove warning "Warn: check public portion of the tpmkey manually"

Discussed under linuxboot#1630 (comment) TODO added in code. Signed-off-by: Thierry Laurion <[email protected]>
tlaurion · May 2, 2024 · 25d88f2 · 25d88f2
1 parent a93a711
commit 25d88f2
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/initrd/bin/tpmr b/initrd/bin/tpmr
@@ -347,8 +347,10 @@ tpm2_startsession() {
 		--saved-session ||
 		die "tpm2_flushcontext: unable to flush saved session"
 	tpm2 readpublic -Q -c "$PRIMARY_HANDLE" -t "$PRIMARY_HANDLE_FILE"
-	tpm2 startauthsession -Q -c "$PRIMARY_HANDLE_FILE" --hmac-session -S "$ENC_SESSION_FILE"
-	tpm2 startauthsession -Q -c "$PRIMARY_HANDLE_FILE" --hmac-session -S "$DEC_SESSION_FILE"
+	#TODO: do the right thing to not have to suppress "WARN: check public portion the tpmkey manually" see https://github.com/linuxboot/heads/pull/1630#issuecomment-2075120429
+	tpm2 startauthsession -Q -c "$PRIMARY_HANDLE_FILE" --hmac-session -S "$ENC_SESSION_FILE" 2>&1 > /dev/null
+	#TODO: do the right thing to not have to suppress "WARN: check public portion the tpmkey manually" see https://github.com/linuxboot/heads/pull/1630#issuecomment-2075120429
+	tpm2 startauthsession -Q -c "$PRIMARY_HANDLE_FILE" --hmac-session -S "$DEC_SESSION_FILE" 2>&1 > /dev/null
 	tpm2 sessionconfig -Q --disable-encrypt "$DEC_SESSION_FILE"
 }