Thanks Rajiv for the reply.
Yes, that is exactly what I am looking for.
I tried downloading open-pts, but ran into a build dependency issue on
ubuntu 9.04 and linux 2.6.30.8 (built with IMA).
So I started looking for some code I can use for remote attestation. I found
some interesting pointers in the thread --
http://marc.info/?l=trousers-users&m=120551114706745&w=2
This was discussed an year ago, so, is there any new code that has been
developed? For example, is there any code available to verify the result of
quote operation?
Thanks once again.
Regards,
Amruta
On Wed, Nov 25, 2009 at 7:34 AM, Rajiv Andrade <[email protected]>wrote:
> I see, you want to implement something in the lines of a remote
> attestation using IMA event log, is that right?
> What about this one:
>
> http://openpts.sourceforge.jp/
>
> Rajiv Andrade
> IBM LTC Security Development
>
> On Thu, 2009-11-12 at 09:50 -0500, Amruta Gokhale wrote:
> > Thanks a lot, Rajiv, for the quick reply.
> >
> > What I am looking for is a client-server model which *uses*(or
> > illustrates) the IMA protocol.
> > (I mistakenly wrote "implements the IMA protocol " in the previous
> > mail, which is not what I
> > am looking for. I am sorry about that.)
> >
> > Another view of this model would be a prover-verifier model, where a
> > verifier requests an
> > integrity measurement list from the prover, and the prover,
> > interacting with its TPM, sends
> > this list to the verifier. This would enable the verifier to verify
> > the run-time stack on the prover.
> >
> > So if I try to use the "tcsd" daemon process as the prover, I need a
> > verifier application which
> > would connect to this daemon, and then send the request for the
> > measurement list to the prover.
> > So I am trying to find out, where in the trousers code are the calls
> > like connect(), send() etc.
> > to interact with the "tcsd" daemon process. It would be of great help
> > if you could point me to
> > this code.
> >
> > Regards,
> > Amruta
> >
> >
> > On Thu, Nov 12, 2009 at 7:40 AM, Rajiv Andrade
> > <[email protected]> wrote:
> > Hi Amruta,
> >
> > TrouSerS isn't the right place where IMA should be. It was
> > integrated
> > into the Linux Kernel in version 2.6.30, and it provides
> > access to the
> > event log/measurement list through securityfs
> > at /sys/kernel/security/ima.
> >
> > On the other hand, TrouSerS-0.3.2 supports its log format, so
> > one can
> > retrieve this log using Tspi_TPM_GetEventLog(), but I'm not
> > sure if
> > that's what you're trying to accomplish with some userspace
> > application
> > (that could use the Tspi to do so).
> >
> > You can find more information about IMA at
> > http://linux-ima.sourceforge.net/
> >
> > Thanks,
> > Rajiv Andrade
> > IBM LTC Security Development
> >
> >
> > On Wed, 2009-11-11 at 23:28 -0500, Amruta Gokhale wrote:
> > > Greetings,
> > >
> > > I have been exploring trousers source code for the past few
> > days. I
> > > was looking for a client-server
> > > model which implements IMA protocol. I have two questions -
> > > 1. Does trousers have open source code for such a model,
> > implementing
> > > IMA protocol?
> > > (The mailing list archive does show that someone had asked
> > about such
> > > user-mode tools which could be
> > > used, and answer to that question was 'No', two years ago.
> > Wanted to
> > > check what is the latest status.)
> > > 2. Assuming that answer to my first question is 'no', if I
> > try to
> > > write small code which does this, then :-
> > > I understand that the TCS core services daemon, namely,
> > 'tcsd', is a
> > > server process listening for connections.
> > > What I didn't understand was how a client connects to this
> > 'tcsd'
> > > daemon. i.e. where in the code are calls to
> > > 'connect' and 'send message' by a client... Any pointers on
> > this?
> > >
> > > Thank you in advance for any help about this.
> > > I appreciate it.
> > >
> > > Regards,
> > > Amruta
> >
> > >
> >
> ------------------------------------------------------------------------------
> > > Let Crystal Reports handle the reporting - Free Crystal
> > Reports 2008 30-Day
> > > trial. Simplify your report design, integration and
> > deployment - and focus on
> > > what you do best, core application coding. Discover what's
> > new with
> > > Crystal Reports now. http://p.sf.net/sfu/bobj-july
> > > _______________________________________________
> > TrouSerS-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/trousers-users
> >
> >
>
>
------------------------------------------------------------------------------
Join us December 9, 2009 for the Red Hat Virtual Experience,
a free event focused on virtualization and cloud computing.
Attend in-depth sessions from your desk. Your couch. Anywhere.
http://p.sf.net/sfu/redhat-sfdev2dev
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users
