What's Changed
- dracut: fix some portability issues in non-systemd environments by @oxiez in #561
- dracut/tang: Order clevis-luks-askpass after network-online.target and more fixes by @rmetrich in #562
- build: Non-automagic pkcs11 pin support by @salahcoronya in #569
- fix: clevis-luks-list didn't show all configured bindings by @Cornelicorn in #570
- Add optional mTLS support to the tang pin by @liyue32 in #566
- Add libpcsclite_real.so to dracut initrd PKCS#11 module by @sarroutbi in #584
- luks: bypass pwquality for generated keys by @sergio-correia in #585
- guard against integer underflow in getpeername by @sarroutbi in #586
- tpm1: drop network dependency from dracut module by @oldium in #579
- pkcs11: drop legacy.so from dracut module by @oldium in #577
- luks: skip ext-token test when the keyring is unusable by @oldium in #578
- Fix compatibility with Ubuntu 22.04 by @lowjoel in #574
- tpm2: use explicit sessions for PCR policy authorization by @khalidfaisal17 in #573
- pkcs11: fix multiple credential exposure vulnerabilities by @sarroutbi in #588
- pkcs11: harden AF_UNIX socket daemon and credential handling by @sergio-correia in #589
New Contributors
- @oxiez made their first contribution in #561
- @salahcoronya made their first contribution in #569
- @Cornelicorn made their first contribution in #570
- @liyue32 made their first contribution in #566
- @lowjoel made their first contribution in #574
- @khalidfaisal17 made their first contribution in #573
Full Changelog: v23...v24