Kees Cook 3dae2288bb mount-encrypted: use correct ownership test ...

Check for ownership via Capabilities instead of Perm Flags. Clean up
missing "static" declarations, disable DEBUG-by-default, clean up spawner
reporting, explicitly check TPM_SUCCESS for Tlcl calls and document.

BUG=chromium-os:22172
TEST=x86-alex build & manual test

Change-Id: Ida6813307b7dfcecb8fb2e240ff88982db5430c5
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-on: https://gerrit.chromium.org/gerrit/25053
Reviewed-by: Gaurav Shah <gauravsh@chromium.org>

2012-06-14 14:41:53 -07:00

..

include

Read kernel body load address from preamble by default

2012-04-06 04:08:54 -07:00

bmpblk_font.c

bmpblock v1.2 - render HWID inside vboot_reference

2011-08-24 09:27:12 -07:00

bmpblk_util.c

bmpblock v1.2 - render HWID inside vboot_reference

2011-08-24 09:27:12 -07:00

bmpblk_utility.cc

bmpblock v1.2 - render HWID inside vboot_reference

2011-08-24 09:27:12 -07:00

chromeos-tpm-recovery

Use existing dash vs. underscore convention for scripts.

2010-11-02 14:04:24 -07:00

chromeos-tpm-recovery-test

Use existing dash vs. underscore convention for scripts.

2010-11-02 14:04:24 -07:00

crossystem_main.c

Add DISABLE_DEV_REQUEST flag to nvram.

2012-05-25 16:05:22 -07:00

dev_debug_vboot

New and improved dev_debug_vboot

2011-11-09 16:38:15 -08:00

dev_make_keypair

Make dumpRSAPublicKey also accept a public key in PEM format

2010-11-01 13:33:32 -07:00

dev_sign_file.c

Verified boot wrapper - add stub implementations for host

2011-06-27 13:30:41 -07:00

dump_fmap.c

Require -Wall -Werror for everything.

2012-05-03 17:38:57 -07:00

dump_kernel_config_main.c

Require -Wall -Werror for everything.

2012-05-03 17:38:57 -07:00

dump_kernel_config.c

Require -Wall -Werror for everything.

2012-05-03 17:38:57 -07:00

dumpRSAPublicKey.c

Make dumpRSAPublicKey also accept a public key in PEM format

2010-11-01 13:33:32 -07:00

eficompress.c

Build EFI compression utilities on host

2011-04-25 10:51:22 -07:00

efidecompress.c

Build EFI compression utilities on host

2011-04-25 10:51:22 -07:00

gbb_utility.cc

gbb_utility: add --flags parameter.

2011-08-29 16:22:09 -07:00

image_types.c

Fix bug in recognizing bad image files.

2011-09-08 10:27:45 -07:00

load_firmware_test.c

Clean up calling LoadFirmware() from VbSelectFirmware()

2011-07-29 13:08:12 -07:00

load_kernel_test.c

Omit body load address check

2012-04-24 23:38:31 -07:00

Makefile

Create vbutil_ec tool for signing EC firmware.

2012-05-04 12:16:45 -07:00

mount-encrypted.c

mount-encrypted: use correct ownership test

2012-06-14 14:41:53 -07:00

mount-encrypted.h

mount-encrypted: use correct ownership test

2012-06-14 14:41:53 -07:00

mount-helpers.c

mount-encrypted: use correct ownership test

2012-06-14 14:41:53 -07:00

mount-helpers.h

mount-encrypted: provide umount option for shutdown

2012-05-17 13:32:27 -07:00

pad_digest_utility.c

Verified boot wrapper - add stub implementations for host

2011-06-27 13:30:41 -07:00

signature_digest_utility.c

Verified boot wrapper - add stub implementations for host

2011-06-27 13:30:41 -07:00

tlcl_generator.c

tlcl: add GetOwner command

2012-06-13 14:22:12 -07:00

tpm_init_temp_fix.c

Run self test unconditionally.

2010-08-12 09:26:50 -07:00

tpm-dad-lock

Add a script that measures DAD behavior (Dictionary Attack Defense)

2010-09-30 13:35:11 -07:00

tpm-nvsize

Test the tpm recovery script with a real TPM.

2010-11-02 10:37:16 -07:00

tpmc.c

tlcl: add GetOwner command

2012-06-13 14:22:12 -07:00

vbutil_ec.c

Make vbutil_ec operate on the entire image at once.

2012-05-08 15:06:24 -07:00

vbutil_firmware.c

Don't check the firmware body when USE_RO_NORMAL preamble flag is presented.

2011-08-23 20:19:12 -07:00

vbutil_kernel.c

Require -Wall -Werror for everything.

2012-05-03 17:38:57 -07:00

vbutil_key.c

Verified boot wrapper - add stub implementations for host

2011-06-27 13:30:41 -07:00

vbutil_keyblock.c

Verified boot wrapper - add stub implementations for host

2011-06-27 13:30:41 -07:00

vbutil_what_keys

vbutil_what_keys should handle devices too

2012-02-22 10:28:51 -08:00

verify_data.c

VBoot Reference: Refactoring Part 3

2010-03-31 13:26:55 -07:00