Age | Commit message (Collapse) | Author |
|
This CL defaults tpm_manager daemon logging to syslog.
Logs can be forwarded to stderr by passing the --log_to_stderr switch.
tpm_manager_client now logs to stderr by default.
Bug: 25567627
TEST=Compile and run on DUT
Change-Id: Icd72aa309207eb5dac884bf1ce57209d69288d1d
|
|
This CL changes the authorization forwarded to LockNvram from "" to
owner_password.
BUG=None
TEST=nvram tests on DUT
Change-Id: Idf4efc6096496d1ad5e1d9ff31739d9c63b38243
|
|
This CL adds the backend implementation to remove tpm owner
dependencies in TpmManager
Bug: 24059577
TEST=remove owner dependency on DUT and observe local data proto
Change-Id: I6bb008e28788c22a0a8f659c1335226c17468b7c
|
|
|
|
|
|
Bug: 24059577
TEST=tpm_manager_client --remove_dependency=Test on DUT
Change-Id: I09996187197b8b5ff717a32e751ebc07b060c15e
|
|
This CL adds Owner Dependency strings. When a Tpm is owned, these
dependencies are stored with the owner password. When all these
dependencies are cleared, the owner password is wiped from the system.
Bug: 24059577
TEST=take ownership on DUT and observe that local_data proto has
"Test" dependency.
Change-Id: I4f9c48febcdf7d10ac00d884aab8527693b05db3
|
|
BUG: 24872993
Change-Id: Ide8203d5a13feb8746d83885578f4002df57312c
|
|
This CL breaks up the dbus_proxy interface to inherit from
TpmOwnershipInterface and TpmNvramInterface.
Bug: 24659038
TEST=compile and run on DUT.
Change-Id: I74c9a7fa3c1c0cbe76e60f08bbb4160d41a40744
|
|
This CL implements the TpmNvram interface for Tpm2.0
Bug: 24059574
TEST=FEATURES=test USE=tpm2 emerge-rambi tpm_manager
TEST=ran nvram methods on an owned tpm2.0
Change-Id: Ic803d6e6fb18362a53708fd6051c1afdf581a9d3
|
|
|
|
This CL implements the TpmNvram interface for Tpm1.2. A lot of
the implementation is adapted from tpm_impl.cc in cryptohome.
Bug: 24059574
TEST=ran nvram methods on an owned tpm1.2
Change-Id: Ica3490cff76bb087d8d26f59440ca150b6c9833d
|
|
|
|
This CL breaks up the monolithic TpmManager Dbus interface into
a TpmOwnershipInterface and a TpmNvramInterface. In the future if
we want to refactor, we can simply remove one of these interface files
and associated code.
Bug: 24659038
TEST=compile and run on DUT.
Change-Id: I52433d9fbb4ff890fe4653bd6001f9a0b4a0982f
|
|
libchromeos is transitioning to libbrillo and chromeos namespaces
and include directory is changing to brillo.
Bug: 24872993
Change-Id: I7c6d56d10263c9b8c76947c2e2d0131209d2e5d8
|
|
This CL implements client side code to call and use the NVRAM api
exposed by TpmManager.
Bug: 24059574
TEST=run nvram methods on DUT and observe print statements
Change-Id: I0acd2fbbd3abb6b76f4774b35972665d83128669
|
|
This CL adds the server side implementation of the NVRAM api to receive
and process NVRAM methods on the server side
Bug: 24059574
TEST=FEATURES=test emerge-link tpm_manager
Change-Id: Id248c17f21adcb17d2142aa18738635df90f592e
|
|
|
|
This CL adds the NVRAM API to the TpmManager DBus interface.
This CL also implements the TpmManagerService to perform these
operations.
Bug: 24059570
TEST=FEATURES=test emerge-link tpm_manager
Change-Id: Ia9f26fde4c6acbd7bc568ddd5ac644b680c580b2
|
|
|
|
This CL adds functionality to allow TpmManager to save its local data
in /var/lib/tpm_manager rather than in /mnt/stateful_partition.
This CL also modifies the upstart script for TpmManager to create
the required files and set their permissions.
Bug: 24059577
TEST=ownership flow on DUT
Change-Id: I876c25b74c4791c73aff6e474ee0992a4ad9d423
|
|
Bug: 24059574
TEST=FEATURES=test emerge-link tpm_manager
Change-Id: I11718b754e756deebfb962eed2b41285859079a3
|
|
This CL adds the TpmNvram class interface. This class will
be used to perform operations on TPM NVRAM, and to expose
TPM backed NVRAM to clients of TpmManager via DBus.
Bug: 24059574
TEST=None
Change-Id: I367fd746785fc50ba83a34d51e4be96bb700c553
|
|
BUG=None
TEST=FEATURES=test USE=tpm2 emerge-rambi tpm_manager
Change-Id: Iaf5a782974d2ec39a62831ac5f315e0c227921c7
|
|
This CL allows for tpm_manager to compile from its new source code
location.
This CL also modifies the MODULE_LICENSE to apache2.
Bug: 23900830
TEST=emerge-link tpm_manager
Change-Id: I2c62aab9c93f909b8b9ba8ee78c307f34b40e9b9
|
|
Bug: 23901903
Change-Id: I2c6e1b472efc658d863e829083e787860ccf3af1
Test: repo upload . --cbr
|
|
|
|
|
|
Bug: 23901903
Change-Id: I54ab3f71698d977ae99c39d8e308410fd00c6776
|
|
|
|
This CL implements the TakeOwnership IPC interface in TpmManager.
This allows clients to take ownership of a Tpm by injecting a random
password. Once a Tpm is owned, it can be utilized by ChromeOS.
BUG=chromium:521635
TEST=unit and take ownership on DUT
Change-Id: Icd4de6b6b1be419dd035e535473929cb8c0ecb16
Reviewed-on: https://chromium-review.googlesource.com/294614
Commit-Ready: Utkarsh Sanghi <usanghi@chromium.org>
Tested-by: Utkarsh Sanghi <usanghi@chromium.org>
Reviewed-by: Utkarsh Sanghi <usanghi@chromium.org>
|
|
TpmStatusImpl and TpmInitializerImpl both need to connect to the Tpm
using Trousers. This code is now abstracted out into a TpmConnection
class.
BUG=chromium:521635
TEST=tpm_manager_client --status on a DUT with Tpm1.2
Change-Id: Ie1eda50fddfc6354fd8bfd43965f044d52f9d1fd
Reviewed-on: https://chromium-review.googlesource.com/296431
Commit-Ready: Utkarsh Sanghi <usanghi@chromium.org>
Tested-by: Utkarsh Sanghi <usanghi@chromium.org>
Reviewed-by: Utkarsh Sanghi <usanghi@chromium.org>
|
|
BUG=brillo:1040
TEST=tpm_manager_client --status
Change-Id: I67322b6f2bd63743812c2b6edb7156471978f6d2
Reviewed-on: https://chromium-review.googlesource.com/292781
Commit-Ready: Utkarsh Sanghi <usanghi@chromium.org>
Tested-by: Utkarsh Sanghi <usanghi@chromium.org>
Reviewed-by: Darren Krahn <dkrahn@chromium.org>
|
|
BUG=None
TEST=check if file is created and read on DUT
Change-Id: I8ab50a7354eb26d6ea89cc68f7ed097972bc63ee
Reviewed-on: https://chromium-review.googlesource.com/293589
Tested-by: Utkarsh Sanghi <usanghi@chromium.org>
Reviewed-by: Darren Krahn <dkrahn@chromium.org>
Commit-Queue: Utkarsh Sanghi <usanghi@chromium.org>
|
|
This allows us to change the import path of libminijail.h easily.
BUG=None
TEST=`emerge-gizmo apmanager attestation cromo cros-disks debugd
libchromeos lorgnette minijail tpm_manager trunks webserver` works.
CQ-DEPEND=CL:293580
Change-Id: I4b44174ae115a93fb9d4299ca24002f9ad37ba6c
Reviewed-on: https://chromium-review.googlesource.com/293483
Reviewed-by: Bertrand Simonnet <bsimonnet@chromium.org>
Commit-Queue: Bertrand Simonnet <bsimonnet@chromium.org>
Trybot-Ready: Bertrand Simonnet <bsimonnet@chromium.org>
Tested-by: Bertrand Simonnet <bsimonnet@chromium.org>
|
|
The first commands supported are GetTpmStatus and TakeOwnership. This CL
implements the relevant server and client boilerplate and logic as well
as adds unit tests for this and current untested code.
This CL only includes mock implementations of the LocalDataStore,
TpmStatus, and TpmInitializer interfaces.
BUG=brillo:1040,brillo:1042
TEST=unit
Change-Id: Ie69d343c21ab8abee84eae5c1f3f08f0c37bbeca
Reviewed-on: https://chromium-review.googlesource.com/288367
Reviewed-by: Utkarsh Sanghi <usanghi@chromium.org>
Commit-Queue: Darren Krahn <dkrahn@chromium.org>
Tested-by: Darren Krahn <dkrahn@chromium.org>
|
|
This CL makes tpm_manager daemon run inside a minijail
sandbox. tpm_managerd now runs as tpm_manager user.
This CL also defines the seccomp policy file for amd64 architecture.
BUG=brillo:1039
TEST=run tpm_managerd on a DUT
CQ-DEPEND=CL:273273
Change-Id: Icb8dbf967a05c0bd26c624ff79127504f21aad19
Reviewed-on: https://chromium-review.googlesource.com/273340
Reviewed-by: Utkarsh Sanghi <usanghi@chromium.org>
Commit-Queue: Utkarsh Sanghi <usanghi@chromium.org>
Tested-by: Utkarsh Sanghi <usanghi@chromium.org>
|
|
Initial commit for TpmManager. This CL defines the daemon tpm_managerd
and command line client tpm_manager_client as part of the TpmManager
BUG=brillo:1038
TEST=unit and tpm_manager_client --status on DUT
Change-Id: Icc9eecb76f14e9e3298a2d66cc1bc71ccce91ffb
Reviewed-on: https://chromium-review.googlesource.com/272216
Reviewed-by: Utkarsh Sanghi <usanghi@chromium.org>
Commit-Queue: Utkarsh Sanghi <usanghi@chromium.org>
Tested-by: Utkarsh Sanghi <usanghi@chromium.org>
|