I see, you want to implement something in the lines of a remote attestation using IMA event log, is that right? What about this one:
http://openpts.sourceforge.jp/ Rajiv Andrade IBM LTC Security Development On Thu, 2009-11-12 at 09:50 -0500, Amruta Gokhale wrote: > Thanks a lot, Rajiv, for the quick reply. > > What I am looking for is a client-server model which *uses*(or > illustrates) the IMA protocol. > (I mistakenly wrote "implements the IMA protocol " in the previous > mail, which is not what I > am looking for. I am sorry about that.) > > Another view of this model would be a prover-verifier model, where a > verifier requests an > integrity measurement list from the prover, and the prover, > interacting with its TPM, sends > this list to the verifier. This would enable the verifier to verify > the run-time stack on the prover. > > So if I try to use the "tcsd" daemon process as the prover, I need a > verifier application which > would connect to this daemon, and then send the request for the > measurement list to the prover. > So I am trying to find out, where in the trousers code are the calls > like connect(), send() etc. > to interact with the "tcsd" daemon process. It would be of great help > if you could point me to > this code. > > Regards, > Amruta > > > On Thu, Nov 12, 2009 at 7:40 AM, Rajiv Andrade > <[email protected]> wrote: > Hi Amruta, > > TrouSerS isn't the right place where IMA should be. It was > integrated > into the Linux Kernel in version 2.6.30, and it provides > access to the > event log/measurement list through securityfs > at /sys/kernel/security/ima. > > On the other hand, TrouSerS-0.3.2 supports its log format, so > one can > retrieve this log using Tspi_TPM_GetEventLog(), but I'm not > sure if > that's what you're trying to accomplish with some userspace > application > (that could use the Tspi to do so). > > You can find more information about IMA at > http://linux-ima.sourceforge.net/ > > Thanks, > Rajiv Andrade > IBM LTC Security Development > > > On Wed, 2009-11-11 at 23:28 -0500, Amruta Gokhale wrote: > > Greetings, > > > > I have been exploring trousers source code for the past few > days. I > > was looking for a client-server > > model which implements IMA protocol. I have two questions - > > 1. Does trousers have open source code for such a model, > implementing > > IMA protocol? > > (The mailing list archive does show that someone had asked > about such > > user-mode tools which could be > > used, and answer to that question was 'No', two years ago. > Wanted to > > check what is the latest status.) > > 2. Assuming that answer to my first question is 'no', if I > try to > > write small code which does this, then :- > > I understand that the TCS core services daemon, namely, > 'tcsd', is a > > server process listening for connections. > > What I didn't understand was how a client connects to this > 'tcsd' > > daemon. i.e. where in the code are calls to > > 'connect' and 'send message' by a client... Any pointers on > this? > > > > Thank you in advance for any help about this. > > I appreciate it. > > > > Regards, > > Amruta > > > > > ------------------------------------------------------------------------------ > > Let Crystal Reports handle the reporting - Free Crystal > Reports 2008 30-Day > > trial. Simplify your report design, integration and > deployment - and focus on > > what you do best, core application coding. Discover what's > new with > > Crystal Reports now. http://p.sf.net/sfu/bobj-july > > _______________________________________________ > TrouSerS-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/trousers-users > > ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ TrouSerS-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/trousers-users
