dh/ima-evm-utils-mirror
1
0
Fork 0
mirror of https://git.code.sf.net/p/linux-ima/ima-evm-utils synced 2025-07-02 13:43:16 +02:00
Code Releases Activity

ima-evm-utils: Check for tsspcrread in runtime

Browse Source 
instead of checking in build time as it's runtime dependency.
Also log when tsspcrread not found to make debugging easier.

We search for tsspcrread unless there is tss2-esys with Esys_PCR_Read(),
thus pcr_none.c was dropped as unneeded.

file_exist(), tst_get_path() and MIN() taken from LTP project.

Signed-off-by: Petr Vorel <pvorel@suse.cz>
[zohar@linux.ibm.com: added USE_FPRINTF definitions]
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
This commit is contained in:
Petr Vorel
2020-07-15 15:28:17 +02:00
committed by Mimi Zohar
parent 1bf51afb46
commit 80d3fda608
7 changed files with 110 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
src/pcr_tsspcrread.c
View File

@ -39,16 +39,32 @@
*/
#include <errno.h>
#include <limits.h>
#include <stdio.h>
#include <string.h>
#include <stdint.h>
#include <openssl/sha.h>
#define USE_FPRINTF
#include "utils.h"
#include "imaevm.h"
#define CMD "tsspcrread"
static char path[PATH_MAX];
int tpm2_pcr_supported(void)
{
if (imaevm_params.verbose > LOG_INFO)
log_info("Using %s to read PCRs.\n", CMD);
if (get_cmd_path(CMD, path, sizeof(path))) {
log_debug("Couldn't find '%s' in $PATH", CMD);
return 0;
}
log_debug("Found '%s' in $PATH", CMD);
return 1;
}
@ -57,11 +73,11 @@ int tpm2_pcr_read(const char *algo_name, int idx, uint8_t *hwpcr,
{
FILE *fp;
char pcr[100]; /* may contain an error */
char cmd[50];
char cmd[PATH_MAX + 50];
int ret;
sprintf(cmd, "tsspcrread -halg %s -ha %d -ns 2> /dev/null",
algo_name, idx);
sprintf(cmd, "%s -halg %s -ha %d -ns 2> /dev/null",
path, algo_name, idx);
fp = popen(cmd, "r");
if (!fp) {
ret = asprintf(errmsg, "popen failed: %s", strerror(errno));