]> git.proxmox.com Git - swtpm.git/commit - tests/_test_print_capabilities
swtpm_setup: Switch over to new python tool and get rid of the bash script
authorStefan Berger <stefanb@linux.vnet.ibm.com>
Mon, 24 Aug 2020 14:45:34 +0000 (10:45 -0400)
committerStefan Berger <stefanb@us.ibm.com>
Fri, 28 Aug 2020 20:27:15 +0000 (16:27 -0400)
commitcc410ca91bec002eefd1c5041699b60333446714
treeead9915f96f27187024e30ca728b4091b29c4a2d
parenteee8cb5dfb13f87140dddda38f65bf61aff19508
swtpm_setup: Switch over to new python tool and get rid of the bash script

Switch over to the new python implementation of swtpm_setup. We need to
also adjust test cases that involved the tcsd that otherwise fail for
various reasons. For in-place testing we need to adjust the PYTHONPATH
and PATH so that swtpm_setup.py can be found and so that swtpm_setup.py
then finds swtpm if it is not explicitly passed as parameter.

Adjust the man page for swtpm_setup to reflect the changes.

We now can run swtpm_setup as any user. However, libvirt still runs it
as tss:tss (for example), which is then creating the signing key as tss:tss
as well. Ideally libvirt would run it as tss:root or any other combination
since the tss group may be used for user wanting to access /dev/tpmrm0 for
example. We at least change the directory ownership of /var/lib/swtpm-localca
to tss:root and keep the world out of this directory.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
20 files changed:
.gitignore
configure.ac
man/man8/swtpm_setup.pod
samples/Makefile.am
src/swtpm_setup/Makefile.am
src/swtpm_setup/swtpm_setup.c
src/swtpm_setup/swtpm_setup.h.in [deleted file]
src/swtpm_setup/swtpm_setup.sh [new file with mode: 0755]
src/swtpm_setup/swtpm_setup.sh.in [deleted file]
tests/Makefile.am
tests/_test_print_capabilities
tests/_test_tpm2_print_capabilities
tests/test_commandline
tests/test_parameters
tests/test_samples_create_tpmca
tests/test_swtpm_setup_create_cert
tests/test_tpm2_parameters
tests/test_tpm2_samples_swtpm_localca
tests/test_tpm2_samples_swtpm_localca_pkcs11
tests/test_tpm2_swtpm_setup_create_cert