]> git.proxmox.com Git - swtpm.git/log
swtpm.git
9 years agoOnly allow a single command per TCP connection to be sent
Stefan Berger [Fri, 13 Mar 2015 01:45:34 +0000 (21:45 -0400)]
Only allow a single command per TCP connection to be sent

Only allow a single command per TCP connection to be sent to
the socket TPM. This solves a problem with the test_parameters
testcase where the TPM seems to get stuck in the poll().
However, the testcase still is not entirely error-free.

9 years agoOnly list LISTEN sockets when checking on tcsd
Stefan Berger [Thu, 12 Mar 2015 18:21:55 +0000 (14:21 -0400)]
Only list LISTEN sockets when checking on tcsd

Only list LISTEN sockets when checking whether tcsd has started
listening on a socket, yet.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoUpdate man page with description for new commands
Stefan Berger [Thu, 12 Mar 2015 13:49:40 +0000 (09:49 -0400)]
Update man page with description for new commands

Update the man page of swtpm_ioctl with the new commands for
getting stateblobs from the CUSE TPM and setting stateblobs in
the CUSE TPM.

9 years agoAdd new ioctls for getting and setting state blobs
Stefan Berger [Thu, 12 Mar 2015 13:32:28 +0000 (09:32 -0400)]
Add new ioctls for getting and setting state blobs

Add new ioctls to get and set the 3 different types of state blobs
from and to the CUSE TPM. Add test cases for testing the new ioctl's
on a CUSE TPM that stores the state encrypted and on a CUSE TPM that
stores it non-encrypted.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoShow error message when not installing as root
Stefan Berger [Fri, 20 Feb 2015 23:44:47 +0000 (18:44 -0500)]
Show error message when not installing as root

Only root can change the ownership of swtpm_setup.sh to tss:tss, so
only root can install the file.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoFix build on RHEL6 where we need -lgthread-2.0
Stefan Berger [Fri, 30 Jan 2015 23:16:09 +0000 (18:16 -0500)]
Fix build on RHEL6 where we need -lgthread-2.0

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoAllocate TPM command buffer on heap rather than on the stack
Stefan Berger [Fri, 30 Jan 2015 22:56:26 +0000 (17:56 -0500)]
Allocate TPM command buffer on heap rather than on the stack

Allocate the TPM command buffer on the heap. Previously it was
allocated on the stack.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoChange void * to concrete structure.
Stefan Berger [Fri, 30 Jan 2015 22:29:54 +0000 (17:29 -0500)]
Change void * to concrete structure.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoAdd some hardening flags to compiler and linker
Stefan Berger [Fri, 30 Jan 2015 22:06:07 +0000 (17:06 -0500)]
Add some hardening flags to compiler and linker

Protect the stack, create position indep. executables, use Relocation
Read-Only (RELRO) and have the linker resolve all symbols upon
program start.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoRemove unused wrapper tcsd-launcher.c
Stefan Berger [Mon, 19 Jan 2015 19:47:35 +0000 (14:47 -0500)]
Remove unused wrapper tcsd-launcher.c

Remove the unused wrapper program tcsd-launcher.c.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoUpdate on TODO
Stefan Berger [Fri, 16 Jan 2015 14:59:51 +0000 (09:59 -0500)]
Update on TODO

9 years agoFix cut and paste error
Stefan Berger [Mon, 22 Dec 2014 20:54:01 +0000 (15:54 -0500)]
Fix cut and paste error

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoRun parallel tests also when building RPMs
Stefan Berger [Fri, 19 Dec 2014 21:16:21 +0000 (16:16 -0500)]
Run parallel tests also when building RPMs

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoAllow tests to run in parallel
Stefan Berger [Fri, 19 Dec 2014 21:10:21 +0000 (16:10 -0500)]
Allow tests to run in parallel

Create uniqe names for the /dev/vtpm* so that tests can run in parallel.
Also separate the state directories of the TPMs into individual temporary
dirs.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoMake SELinux policy extension support chooseable
Stefan Berger [Fri, 19 Dec 2014 14:28:47 +0000 (09:28 -0500)]
Make SELinux policy extension support chooseable

Extend configure.ac to make SELinux policy extension support
chooseable. By default configure will check whether SELinux
support is installed on the local system and will add SELinux
policy extension support if support is found.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoSearch for external echo tool
Stefan Berger [Fri, 19 Dec 2014 03:27:53 +0000 (22:27 -0500)]
Search for external echo tool

Search for bash-external echo tool.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoSupport for openssl
Stefan Berger [Fri, 19 Dec 2014 03:19:57 +0000 (22:19 -0500)]
Support for openssl

Also support swtpm using OpenSSL library.
Introduce --with-openssl in configure.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoCheck for missing freebl headers and freebl lib
Stefan Berger [Thu, 18 Dec 2014 16:04:22 +0000 (11:04 -0500)]
Check for missing freebl headers and freebl lib

Add a check for missing freebl header blapi.h (missing in Ubuntu)
and missing freebl static library that provides AES_CreateContext.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
9 years agoMerge branch 'master' of https://github.com/stefanberger/swtpm
Stefan Berger [Thu, 11 Dec 2014 19:05:33 +0000 (14:05 -0500)]
Merge branch 'master' of https://github.com/stefanberger/swtpm

9 years agoMerge TODO list from swtpm tools project
Stefan Berger [Thu, 11 Dec 2014 19:04:48 +0000 (14:04 -0500)]
Merge TODO list from swtpm tools project

9 years agoEnable building of rpms on RHEL 7
Stefan Berger [Wed, 10 Dec 2014 01:37:27 +0000 (20:37 -0500)]
Enable building of rpms on RHEL 7

Some tweaks to enable building of RPMs on RHEL 7.

9 years agoMake compileable on RHEL 7 for ppc64
Stefan Berger [Wed, 10 Dec 2014 01:10:00 +0000 (20:10 -0500)]
Make compileable on RHEL 7 for ppc64

There are some tiny adjustments needed for linking on RHEL 7 for ppc64.
Otherwise it works there now as well.

9 years agoLink programs with minimal set of libraries
Stefan Berger [Wed, 10 Dec 2014 00:59:27 +0000 (19:59 -0500)]
Link programs with minimal set of libraries

Don't build up a global LIBS variable but put the libraries into
individual variables that can be used for linking individual programs
with. Do the same for CFLAGS.

9 years agoImprove on the list of dependencies.
Stefan Berger [Tue, 9 Dec 2014 18:42:17 +0000 (13:42 -0500)]
Improve on the list of dependencies.

Update the list of rpm dependencies referred to in INSTALL and
configure.ac and the spec file.

9 years agoIgnore directories related to quilt.
Stefan Berger [Mon, 8 Dec 2014 17:53:47 +0000 (12:53 -0500)]
Ignore directories related to quilt.

9 years agofix typo in man page
Stefan Berger [Mon, 8 Dec 2014 17:53:13 +0000 (12:53 -0500)]
fix typo in man page

9 years agoAdd ioctl to reset the establishment bit
Stefan Berger [Mon, 8 Dec 2014 16:25:14 +0000 (11:25 -0500)]
Add ioctl to reset the establishment bit

Add an ioctl to reset the establishment bit. It takes as an
argument the locality to use.

9 years agofixing typo in man page
Stefan Berger [Fri, 5 Dec 2014 20:14:09 +0000 (15:14 -0500)]
fixing typo in man page

9 years agoadd new README files for the tools and modify main README file
Stefan Berger [Fri, 5 Dec 2014 20:11:15 +0000 (15:11 -0500)]
add new README files for the tools and modify main README file

9 years agotpm_ioctl.h is LGPL licensed
Stefan Berger [Fri, 5 Dec 2014 19:01:36 +0000 (14:01 -0500)]
tpm_ioctl.h is LGPL licensed

9 years agoadding file to create rpm spec file from
Stefan Berger [Fri, 5 Dec 2014 18:46:46 +0000 (13:46 -0500)]
adding file to create rpm spec file from

9 years agomerging swtpm-tools into this project
Stefan Berger [Fri, 5 Dec 2014 18:43:21 +0000 (13:43 -0500)]
merging swtpm-tools into this project

9 years agoinitialize errno to 0 before strtoul call
Stefan Berger [Fri, 5 Dec 2014 17:43:45 +0000 (12:43 -0500)]
initialize errno to 0 before strtoul call

9 years agoadding LICENSE file
Stefan Berger [Fri, 5 Dec 2014 16:22:28 +0000 (11:22 -0500)]
adding LICENSE file

9 years agoinitial check-in
Stefan Berger [Fri, 5 Dec 2014 16:16:03 +0000 (11:16 -0500)]
initial check-in