I see, you want to implement something in the lines of a remote
attestation using IMA event log, is that right? 
What about this one:

http://openpts.sourceforge.jp/

Rajiv Andrade
IBM LTC Security Development

On Thu, 2009-11-12 at 09:50 -0500, Amruta Gokhale wrote:
> Thanks a lot, Rajiv, for the quick reply.
> 
> What I am looking for is a client-server model which *uses*(or
> illustrates) the IMA protocol.
> (I mistakenly wrote "implements the IMA protocol " in the previous
> mail, which is not what I
> am looking for. I am sorry about that.)
> 
> Another view of this model would be a prover-verifier model, where a
> verifier requests an
> integrity measurement list from the prover, and the prover,
> interacting with its TPM, sends
> this list to the verifier. This would enable the verifier to verify
> the run-time stack on the prover.
> 
> So if I try to use the "tcsd" daemon process as the prover, I need a
> verifier application which
> would connect to this daemon, and then send the request for the
> measurement list to the prover.
> So I am trying to find out, where in the trousers code are the calls
> like connect(), send() etc.
> to interact with the "tcsd" daemon process. It would be of great help
> if you could point me to
> this code.
> 
> Regards,
> Amruta
> 
> 
> On Thu, Nov 12, 2009 at 7:40 AM, Rajiv Andrade
> <[email protected]> wrote:
>         Hi Amruta,
>         
>         TrouSerS isn't the right place where IMA should be. It was
>         integrated
>         into the Linux Kernel in version 2.6.30, and it provides
>         access to the
>         event log/measurement list through securityfs
>         at /sys/kernel/security/ima.
>         
>         On the other hand, TrouSerS-0.3.2 supports its log format, so
>         one can
>         retrieve this log using Tspi_TPM_GetEventLog(), but I'm not
>         sure if
>         that's what you're trying to accomplish with some userspace
>         application
>         (that could use the Tspi to do so).
>         
>         You can find more information about IMA at
>         http://linux-ima.sourceforge.net/
>         
>         Thanks,
>         Rajiv Andrade
>         IBM LTC Security Development
>         
>         
>         On Wed, 2009-11-11 at 23:28 -0500, Amruta Gokhale wrote:
>         > Greetings,
>         >
>         > I have been exploring trousers source code for the past few
>         days. I
>         > was looking for a client-server
>         > model which implements IMA protocol. I have two questions -
>         > 1. Does trousers have open source code for such a model,
>         implementing
>         > IMA protocol?
>         > (The mailing list archive does show that someone had asked
>         about such
>         > user-mode tools which could be
>         > used, and answer to that question was 'No', two years ago.
>         Wanted to
>         > check what is the latest status.)
>         > 2. Assuming that answer to my first question is 'no', if I
>         try to
>         > write small code which does this, then :-
>         > I understand that the TCS core services daemon, namely,
>         'tcsd', is a
>         > server process listening for connections.
>         > What I didn't understand was how a client connects to this
>         'tcsd'
>         > daemon. i.e. where in the code are calls to
>         > 'connect' and 'send message' by a client... Any pointers on
>         this?
>         >
>         > Thank you in advance for any help about this.
>         > I appreciate it.
>         >
>         > Regards,
>         > Amruta
>         
>         >
>         
> ------------------------------------------------------------------------------
>         > Let Crystal Reports handle the reporting - Free Crystal
>         Reports 2008 30-Day
>         > trial. Simplify your report design, integration and
>         deployment - and focus on
>         > what you do best, core application coding. Discover what's
>         new with
>         > Crystal Reports now.  http://p.sf.net/sfu/bobj-july
>         > _______________________________________________
>         TrouSerS-users mailing list
>         [email protected]
>         https://lists.sourceforge.net/lists/listinfo/trousers-users
>         
> 


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to