Added TPM 2.0 CRB support
Increased BSP and AP stacks to avoid stack overflow
Added an ACPI_RSDP structure g_rsdp in tboot to avoid potential memory overwritten issue on TPM 2.0 UEFI platforms
Added support to both Intel TPM nv index set and TCG TPM nv index set
grub2: tboot doesn't skip first argument any more
grub2: sanitize whitespace in command lines
grub2: Allow addition of policy data in grub.cfg
grub2 support: allow the user to customize the command line
Mitigated S3 resume delay by adjusting LZ_MAX_OFFSET to 5000 in lz.c.
Added SGX TPM nv index support
Add 64 bit ELF object support
Gentoo Hardened, which uses the GRSecurity and PaX patch sets
Disable -fstack-check in CFLAG for compatibility with Gentoo Linux.
Enhanced tboot compatiblity running on non-Intel TXT platform with a fix of is_launched()
LCP documentation improvements
- tboot-grub2-suse.patch: refreshed
- tboot-grub2-fix-xen-submenu-name.patch: refreshed
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=46
* Added verified launch control policy user guide
* Fixed a bug about var MTRR settings to follow the rule that each VAR MTRR base must be a multiple of that MTRR's size.
* Access tpm sts reg with 3-byte width in v1.2 case and 4-byte width in v2.0 case
* Bugfix: lcp2_mlehash get wrong hash if the cmdline string length > 7
* Optimized tboot log processing flow to avoid log buffer overflow by adopting lz Compress/Uncompress algorithms
* Added SGX support for Skylake platform
* tpm2: use the primary object in NULL Hierarchy instead of Platform Hierarchy for seal/unseal usage
* Fixed a bug for lcp2_mlehash tool
* Fixed system hang issue caused by TXT disable, TPM disable or SINIT ACM not correctly provided in EFI booting mode
* Fixed bug for wrong assumption on the way how GRUB2 load modules
* Fixed MB2 tags mess issue caused by moving shorter module cmdline to head
* Fixed compile issue when debug=y
- refreshed tboot-grub2-fix-xen-submenu-name.patch
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=44
Fix build error "may be used uninitialized"
Reset eventlog when S3
Update tboot version to 1.8.1 in grub title
Fix grub cfg file generation scripts for SLES12
Fix seal failure issue
tpm2 lcptools
Restore local apic base for AP
Fix typo in hash_alg_to_string()
Change to create primary object only once
Add prepare_tpm call in S3 path to ensure locality 0 was released before senter
Fix possible dead loop in print_bios_data when bios_data version 4
Fix possible null pointer dereference in loader.c
Fix possible null pointer dereference in tpm_12.c and tpm_20.c
Avoid buffer overrun when append tpm12 eventlog
Fix possible NULL pointer dereference
Fix one event log issue caused by wrong append and print operation
Fix error "unsupported hash alg" for agile extend policy
Fix warning "ACM info_table version mismatch"
Update the tpm family detection with a general way
Fix a lcp tools issue caused by redefining TB_HALG_SHA1 from 0 to 4
Assign g_tpm a value for no tpm case to avoid NULL checks
Fix crash when TPM is missing
Fix infinite loop in determine_multiboot_type()
Fix typo in tpm20_init() and remove unused variable
Allow the to-be-measured nv to be protected by AUTHWRITE
Check cpu vendor id to avoid unexpected behavior in non-intel cpu
Change to detect TPM family only once
Fix some typos caused by copy-paste
- removed tboot-cs381.patch: upstream
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=36
Update README for TPM2 support
tpm2 support
Adding sha256 algorithm implementation
Update README for TPM NV measuring
Update README for EFI support
Fix typo in tboot/Makefile
Increase the supported maximum number of cpus from 256 to 512
Extend tboot policy supporting measuring TPM NV
EFI support via multiboot2 changes
Fix typo in common/hash.c
Fix verification for extended data elements in txt heap
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=28
Update README with updated code repository url.
Fix grub2 scripts to be compatible with more distros.
Update README for RACM launch support
Add a new option "call_racm=true|false" for revocation acm(RACM) launch
Fix potential buffer overrun & memory leak in crtpconf.c
Fix a potential buffer overrun in lcptools/lock.c
Print cmdline in multi-lines
Optional print TXT.ERRORCODE under level error or info
Fix side effects of tboot log level macros in tools
Update readme for the new detail log level
Classify all logs into different log levels
Add detail log level and the macros defined for log level
Fix acmod_error_t type to correctly align all bits in 4bytes
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=24
Add Makefile for docs to install man pages.
Add man pages for tools
Add grub-mkconfig helper scripts for tboot case in GRUB2
Fix for deb build in ubuntu
Fix S3 issue brought by c/s 308
Fix a S4 hang issue and a potential shutdown reset issue
Fix build with new zlib 1.2.7.
Initialize event log when S3
Update README to change upstream repo url from bughost.org to sf.net.
- updated to 1.7.1/20120427
Fix cmdline size in tb_polgen
Add description for option min_ram in README.
new tboot cmdline option "min_ram=0xXXXXXX"
Update test-patches/tpm-test.patch to fit in latest code.
OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=17
