diff --git a/deps/verifier/src/se/README.md b/deps/verifier/src/se/README.md index 11cde22f2..0ee09c088 100644 --- a/deps/verifier/src/se/README.md +++ b/deps/verifier/src/se/README.md @@ -241,13 +241,13 @@ allow if { input["se.attestation_phkh"] == "xxx" input["se.image_phkh"] == "xxx" input["se.tag"] == "xxx" - input["se.user_data"] == "00" + input["se.user_data"] == "xxx" converted_version == "256" } EOF ``` -Where the values come from [retrive-the-rvps-field-for-an-ibm-se-image](#retrive-the-rvps-field-for-an-ibm-se-image) +Where the values `se.version`, `se.attestation_phkh`, `se.image_phkh` and `se.tag` come from [retrive-the-rvps-field-for-an-ibm-se-image](#retrive-the-rvps-field-for-an-ibm-se-image). The value `se.user_data` comes from [initdata](https://github.com/confidential-containers/cloud-api-adaptor/blob/main/src/cloud-api-adaptor/docs/initdata.md). Please remove `input["se.user_data"] == "xxx"` if `initdata` is not used. #### Set the attestation policy ```bash