[coreboot-gerrit] Change in coreboot[master]: security/vboot: Decouple measured boot from verified boot

[Julius Werner (Code Review)]

Julius Werner has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/35077 )

Change subject: security/vboot: Decouple measured boot from verified boot
......................................................................

Patch Set 61:

(2 comments)

https://review.coreboot.org/c/coreboot/+/35077/61/src/lib/cbfs.c 
File src/lib/cbfs.c:

https://review.coreboot.org/c/coreboot/+/35077/61/src/lib/cbfs.c@105 
PS61, Line 105: 	return ret;
This is changing what files we measure (whereas the rest of your patch changes a lot of the inner workings of measurement but not the end result), so if you want this I think you should put it in a separate patch.

https://review.coreboot.org/c/coreboot/+/35077/61/src/security/tpm/tspi/crtm... 
File src/security/tpm/tspi/crtm.c:

https://review.coreboot.org/c/coreboot/+/35077/61/src/security/tpm/tspi/crtm... 
PS61, Line 143: 	case CBFS_TYPE_MRC:
This, too, is probably correct but should be a separate patch.