Thanks a lot, Rajiv, for the quick reply.
What I am looking for is a client-server model which *uses*(or illustrates)
the IMA protocol.
(I mistakenly wrote "implements the IMA protocol " in the previous mail,
which is not what I
am looking for. I am sorry about that.)
Another view of this model would be a prover-verifier model, where a
verifier requests an
integrity measurement list from the prover, and the prover, interacting with
its TPM, sends
this list to the verifier. This would enable the verifier to verify the
run-time stack on the prover.
So if I try to use the "tcsd" daemon process as the prover, I need a
verifier application which
would connect to this daemon, and then send the request for the measurement
list to the prover.
So I am trying to find out, where in the trousers code are the calls like
connect(), send() etc.
to interact with the "tcsd" daemon process. It would be of great help if you
could point me to
this code.
Regards,
Amruta
On Thu, Nov 12, 2009 at 7:40 AM, Rajiv Andrade <[email protected]>wrote:
> Hi Amruta,
>
> TrouSerS isn't the right place where IMA should be. It was integrated
> into the Linux Kernel in version 2.6.30, and it provides access to the
> event log/measurement list through securityfs
> at /sys/kernel/security/ima.
>
> On the other hand, TrouSerS-0.3.2 supports its log format, so one can
> retrieve this log using Tspi_TPM_GetEventLog(), but I'm not sure if
> that's what you're trying to accomplish with some userspace application
> (that could use the Tspi to do so).
>
> You can find more information about IMA at
> http://linux-ima.sourceforge.net/
>
> Thanks,
> Rajiv Andrade
> IBM LTC Security Development
>
> On Wed, 2009-11-11 at 23:28 -0500, Amruta Gokhale wrote:
> > Greetings,
> >
> > I have been exploring trousers source code for the past few days. I
> > was looking for a client-server
> > model which implements IMA protocol. I have two questions -
> > 1. Does trousers have open source code for such a model, implementing
> > IMA protocol?
> > (The mailing list archive does show that someone had asked about such
> > user-mode tools which could be
> > used, and answer to that question was 'No', two years ago. Wanted to
> > check what is the latest status.)
> > 2. Assuming that answer to my first question is 'no', if I try to
> > write small code which does this, then :-
> > I understand that the TCS core services daemon, namely, 'tcsd', is a
> > server process listening for connections.
> > What I didn't understand was how a client connects to this 'tcsd'
> > daemon. i.e. where in the code are calls to
> > 'connect' and 'send message' by a client... Any pointers on this?
> >
> > Thank you in advance for any help about this.
> > I appreciate it.
> >
> > Regards,
> > Amruta
> >
> ------------------------------------------------------------------------------
> > Let Crystal Reports handle the reporting - Free Crystal Reports 2008
> 30-Day
> > trial. Simplify your report design, integration and deployment - and
> focus on
> > what you do best, core application coding. Discover what's new with
> > Crystal Reports now. http://p.sf.net/sfu/bobj-july
> > _______________________________________________ TrouSerS-users mailing
> list [email protected]
> https://lists.sourceforge.net/lists/listinfo/trousers-users
>
>
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users
