From a5fda98bb08de667687e2eb11d7e049600777152 Mon Sep 17 00:00:00 2001
From: Michael Preisach <michael@preisach.at>
Date: Mon, 29 Jun 2020 11:09:06 +0200
Subject: [PATCH] changed file permissions of secret.bin

---
 create-luks-tpm.sh | 1 +
 tags               | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/create-luks-tpm.sh b/create-luks-tpm.sh
index 439f670..f34e765 100755
--- a/create-luks-tpm.sh
+++ b/create-luks-tpm.sh
@@ -5,6 +5,7 @@ CRYPTFS=/dev/nvme0n1p3
 
 echo "creating secret key"
 tpm2_getrandom 32 -o /root/secret.bin
+chmod 600 /root/secret.bin
 cryptsetup luksAddKey $CRYPTFS /root/secret.bin
 
 /usr/sbin/update-luks-tpm.sh
diff --git a/tags b/tags
index 7761583..cfc9c2d 100644
--- a/tags
+++ b/tags
@@ -6,4 +6,7 @@
 !_TAG_PROGRAM_NAME	Universal Ctags	/Derived from Exuberant Ctags/
 !_TAG_PROGRAM_URL	https://ctags.io/	/official site/
 !_TAG_PROGRAM_VERSION	0.0.0	/a3c87ab5/
+Details / manual installation	README.md	/^## Details \/ manual installation$/;"	s
+Result	README.md	/^## Result$/;"	s
+Usage	README.md	/^## Usage$/;"	s
 trustedboot	README.md	/^# trustedboot$/;"	c