Alberto Planas Dominguez
1984619ff9
- Update to version 0.1.0+git.1659977521.0186093: * Fix display of mb measurement file path * Add more helpful error when config file is not found * Fix small comment about implementing TPM ownership * main: die when cannot drop privileges * keylime.conf: add run_as section * Use Rust agent-specific config in Makefile * Fix typo in listen_notifications option in keylime.conf * tpm: Support pre-existing EK * Set swtpm context which is later used for test filtering * Add GitLeaks configuration to ignore RSA key used for testing * Handle whitespace in keylime.conf - Rename keylime.conf to keylime-agent.conf - Drop 0001-main-die-when-cannot-drop-privileges.patch, as is already merged upstream - Add bindgen.patch to add more architectures OBS-URL: https://build.opensuse.org/request/show/994355 OBS-URL: https://build.opensuse.org/package/show/security/rust-keylime?expand=0&rev=23
35 lines
1.2 KiB
Diff
35 lines
1.2 KiB
Diff
Index: rust-keylime-0.1.0+git.1659977521.0186093/keylime-agent.conf
|
|
===================================================================
|
|
--- rust-keylime-0.1.0+git.1659977521.0186093.orig/keylime-agent.conf
|
|
+++ rust-keylime-0.1.0+git.1659977521.0186093/keylime-agent.conf
|
|
@@ -4,7 +4,8 @@
|
|
|
|
# Revocation IP & Port used by either the cloud_agent or keylime_ca to receive
|
|
# revocation events from the verifier.
|
|
-receive_revocation_ip = 127.0.0.1
|
|
+# receive_revocation_ip = 127.0.0.1
|
|
+receive_revocation_ip = <REMOTE_IP>
|
|
receive_revocation_port = 8992
|
|
|
|
|
|
@@ -13,7 +14,8 @@ receive_revocation_port = 8992
|
|
#=============================================================================
|
|
|
|
# The binding address and port for the agent server
|
|
-cloudagent_ip = 127.0.0.1
|
|
+# cloudagent_ip = 127.0.0.1
|
|
+cloudagent_ip = 0.0.0.0
|
|
cloudagent_port = 9002
|
|
|
|
# Address and port where the verifier and tenant can connect to reach the agent.
|
|
@@ -22,7 +24,8 @@ agent_contact_ip = 127.0.0.1
|
|
agent_contact_port = 9002
|
|
|
|
# The address and port of registrar server which agent communicate with
|
|
-registrar_ip = 127.0.0.1
|
|
+# registrar_ip = 127.0.0.1
|
|
+registrar_ip = <REMOTE_IP>
|
|
registrar_port = 8890
|
|
|
|
# The keylime working directory. Can be overriden by setting the KEYLIME_DIR
|