Fix a lot of issues in tools reported by klocwork scan.
Fix a lot of issues in tboot module reported by klocwork scan.
Remove a redundant tboot option
Fix indent in heap.c
Fix 4 issues along with extpol=agile option
Mitigations for tpm interposer attacks
Add an option in tboot to force SINIT to use the legacy TPM2 log format.
Add support for appending to a TPM2 TCG style event log.
Ensure tboot log is available even when measured launch is skipped.
Add centos7 instructions for Use in EFI boot mode.
Fix memory leak and invalid reads and writes issues.
Fix TPM 1.2 locality selection issue.
Fix a null pointer dereference bug when Intel TXT is disabled.
Optimize tboot docs installation.
Fix security vulnerabilities rooted in tpm_if structure and g_tpm variable.
The size field of the MB2 tag is the size of the tag header + the size
Fix openssl-1.0.2 double frees
Make policy element stm_elt use unique type name
lcptools-v2 utilities fixes
port to openssl-1.1.0
Reset debug PCR16 to zero.
Fix a logical error in function bool evtlog_append(...).
- removed tboot-CVE-2017-16837.patch: now contained in tarball
- removed tboot-openssl-1-1-0.patch: now contained in tarball
- removed tboot-signature-segfault.patch: now contained in tarball
- removed tboot-ssl-broken.patch: now contained in tarball
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=78
- removed following patches, because they're now included upstream:
* tboot-grub2-fix-menu-in-xen-host-server.patch
* tboot-grub2-fix-xen-submenu-name.patch
* tboot-grub2-suse.patch
- Changes in this version:
* GCC7 fix, adds generic FALLTHROUGH notations to avoid warnings appearing on GCC7
* Ensure Tboot never overwrites modules in the process of moving them.
* Add support to x2APIC, which uses 32 bit APIC ID.
* Fix S3 secrets sealing/unsealing failures
* Support OpenSSL 1.1.0+ for ECDSA signature verification.
* Support OpenSSL 1.1.0+ for RSA key manipulation.
* Adds additional checks to prevent the kernel image from being overwritten.
* Added TCG TPM event log support.
* Pass through the EFI memory map that's provided by grub2.
* Fix a null pointer dereference bug when Intel TXT is disabled in BIOS.
* Adjust KERNEL_CMDLINE_OFFSET from 0x9000 to 0x8D00.
* Bounds checking on the kernel_cmdline string.
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=64
+ Add 2nd generation of LCP creation tool source codes for TPM 2.0 platforms.
+ Add user guide for 2nd generation LCP creation tool
+ Provide workaround for Intel PTT(Platform Trust Technology) & Linux PTT driver.
+ Add new fields in Linux kernel header struct to accommodate Linux kernel new capabilities.
+ Fix a pointer dereference regression in the tboot native Linux loader which manifests itself as a system reset.
+ Fix the issue of overwriting tboot when the loaded elf kernel is located below tboot.
+ Add support to release TPM localities when tboot exits to linux kernel.
+ Fix the evtlog dump function for tpm2 case.
+ Initiaize kernel header comdline buffer before copying kernel cmdline arguments to the buffer to avoid random
+ data at end of the original cmdline contents.
+ Move tpm_detect() to an earlier stage so as to get tpm interface initialized before checking TXT platform capabilities.
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=55
Added TPM 2.0 CRB support
Increased BSP and AP stacks to avoid stack overflow
Added an ACPI_RSDP structure g_rsdp in tboot to avoid potential memory overwritten issue on TPM 2.0 UEFI platforms
Added support to both Intel TPM nv index set and TCG TPM nv index set
grub2: tboot doesn't skip first argument any more
grub2: sanitize whitespace in command lines
grub2: Allow addition of policy data in grub.cfg
grub2 support: allow the user to customize the command line
Mitigated S3 resume delay by adjusting LZ_MAX_OFFSET to 5000 in lz.c.
Added SGX TPM nv index support
Add 64 bit ELF object support
Gentoo Hardened, which uses the GRSecurity and PaX patch sets
Disable -fstack-check in CFLAG for compatibility with Gentoo Linux.
Enhanced tboot compatiblity running on non-Intel TXT platform with a fix of is_launched()
LCP documentation improvements
- tboot-grub2-suse.patch: refreshed
- tboot-grub2-fix-xen-submenu-name.patch: refreshed
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=46
* Added verified launch control policy user guide
* Fixed a bug about var MTRR settings to follow the rule that each VAR MTRR base must be a multiple of that MTRR's size.
* Access tpm sts reg with 3-byte width in v1.2 case and 4-byte width in v2.0 case
* Bugfix: lcp2_mlehash get wrong hash if the cmdline string length > 7
* Optimized tboot log processing flow to avoid log buffer overflow by adopting lz Compress/Uncompress algorithms
* Added SGX support for Skylake platform
* tpm2: use the primary object in NULL Hierarchy instead of Platform Hierarchy for seal/unseal usage
* Fixed a bug for lcp2_mlehash tool
* Fixed system hang issue caused by TXT disable, TPM disable or SINIT ACM not correctly provided in EFI booting mode
* Fixed bug for wrong assumption on the way how GRUB2 load modules
* Fixed MB2 tags mess issue caused by moving shorter module cmdline to head
* Fixed compile issue when debug=y
- refreshed tboot-grub2-fix-xen-submenu-name.patch
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=44
Fix build error "may be used uninitialized"
Reset eventlog when S3
Update tboot version to 1.8.1 in grub title
Fix grub cfg file generation scripts for SLES12
Fix seal failure issue
tpm2 lcptools
Restore local apic base for AP
Fix typo in hash_alg_to_string()
Change to create primary object only once
Add prepare_tpm call in S3 path to ensure locality 0 was released before senter
Fix possible dead loop in print_bios_data when bios_data version 4
Fix possible null pointer dereference in loader.c
Fix possible null pointer dereference in tpm_12.c and tpm_20.c
Avoid buffer overrun when append tpm12 eventlog
Fix possible NULL pointer dereference
Fix one event log issue caused by wrong append and print operation
Fix error "unsupported hash alg" for agile extend policy
Fix warning "ACM info_table version mismatch"
Update the tpm family detection with a general way
Fix a lcp tools issue caused by redefining TB_HALG_SHA1 from 0 to 4
Assign g_tpm a value for no tpm case to avoid NULL checks
Fix crash when TPM is missing
Fix infinite loop in determine_multiboot_type()
Fix typo in tpm20_init() and remove unused variable
Allow the to-be-measured nv to be protected by AUTHWRITE
Check cpu vendor id to avoid unexpected behavior in non-intel cpu
Change to detect TPM family only once
Fix some typos caused by copy-paste
- removed tboot-cs381.patch: upstream
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=36
Update README for TPM2 support
tpm2 support
Adding sha256 algorithm implementation
Update README for TPM NV measuring
Update README for EFI support
Fix typo in tboot/Makefile
Increase the supported maximum number of cpus from 256 to 512
Extend tboot policy supporting measuring TPM NV
EFI support via multiboot2 changes
Fix typo in common/hash.c
Fix verification for extended data elements in txt heap
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=28
Update README with updated code repository url.
Fix grub2 scripts to be compatible with more distros.
Update README for RACM launch support
Add a new option "call_racm=true|false" for revocation acm(RACM) launch
Fix potential buffer overrun & memory leak in crtpconf.c
Fix a potential buffer overrun in lcptools/lock.c
Print cmdline in multi-lines
Optional print TXT.ERRORCODE under level error or info
Fix side effects of tboot log level macros in tools
Update readme for the new detail log level
Classify all logs into different log levels
Add detail log level and the macros defined for log level
Fix acmod_error_t type to correctly align all bits in 4bytes
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=24
Add Makefile for docs to install man pages.
Add man pages for tools
Add grub-mkconfig helper scripts for tboot case in GRUB2
Fix for deb build in ubuntu
Fix S3 issue brought by c/s 308
Fix a S4 hang issue and a potential shutdown reset issue
Fix build with new zlib 1.2.7.
Initialize event log when S3
Update README to change upstream repo url from bughost.org to sf.net.
- updated to 1.7.1/20120427
Fix cmdline size in tb_polgen
Add description for option min_ram in README.
new tboot cmdline option "min_ram=0xXXXXXX"
Update test-patches/tpm-test.patch to fit in latest code.
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=17
