Index: man/man8/tcsd.8 |
diff --git a/man/man8/tcsd.8 b/man/man8/tcsd.8 |
new file mode 100644 |
index 0000000000000000000000000000000000000000..6c0a2e83e39d0423067da187cab6810544a7496b |
--- /dev/null |
+++ b/man/man8/tcsd.8 |
@@ -0,0 +1,107 @@ |
+.\" Copyright (C) 2005 International Business Machines Corporation |
+.\" |
+.de Sh \" Subsection |
+.br |
+.if t .Sp |
+.ne 5 |
+.PP |
+\fB\\$1\fR |
+.PP |
+.. |
+.de Sp \" Vertical space (when we can't use .PP) |
+.if t .sp .5v |
+.if n .sp |
+.. |
+.de Ip \" List item |
+.br |
+.ie \\n(.$>=3 .ne \\$3 |
+.el .ne 3 |
+.IP "\\$1" \\$2 |
+.. |
+.TH "tcsd" 8 "2005-03-15" "TSS 1.1" |
+.ce 1 |
+TCG Software Stack |
+.SH NAME |
+tcsd \- daemon that manages Trusted Computing resources |
+.SH "SYNOPSIS" |
+.ad l |
+.hy 0 |
+.B tcsd |
+.RB [ \-f ] |
+ |
+.SH "DESCRIPTION" |
+.PP |
+Trousers is an open-source TCG Software Stack (TSS), released under the Common |
+Public License. Trousers aims to be compliant with the current (1.1b) and |
+upcoming (1.2) TSS specifications available from the Trusted Computing Group |
+website: http://www.trustedcomputinggroup.org. |
+ |
+\fBtcsd\fR is a user space daemon that should be (according to the TSS spec) |
+the only portal to the TPM device driver. At boot time, \fBtcsd\fR should |
+be started, it should open the TPM device driver and from that point on, all |
+requests to the TPM should go through the TSS stack. The \fBtcsd\fR manages TPM |
+resources and handles requests from TSP's both local and remote. |
+ |
+.TP |
+\fB\-f\fR |
+run the daemon in the foreground |
+ |
+.SH "ACCESS CONTROL" |
+.PP |
+There are two types of access control for the \fBtcsd\fR, access to the |
+daemon's socket itself and access to specific commands internal to the |
+\fBtcsd\fR. Access to the \fBtcsd\fR's port should be controlled by the system |
+administrator using firewall rules. If using iptables, the following rule |
+will allow a specific host access to the tcsd: |
+ |
+# iptables -A INPUT -s $IP_ADDRESS -p tcp --destination-port 30003 -j ACCEPT |
+ |
+Access to individual commands internal to the tcsd is configured by the |
+\fBtcsd\fR configuration file's "remote_ops" directive. Each function call |
+in the TCS API is reachable by a unique ordinal. Each labeled "remote op" |
+actually defines a set of ordinals (usually more than one) necessary to |
+accomplish the operation. So, for example, the "random" operation enables |
+the ordinals for opening and closing a context, calling TCS_StirRandom |
+and TCS_GetRandom, as well as TCS_FreeMemory. By default, connections from |
+localhost will allow any ordinals. |
+ |
+.SH "DATA FILES" |
+.PP |
+TSS applications have access to 2 different kinds of 'persistant' storage. 'User' |
+persistant storage has the lifetime of that of the application using it |
+and therefore is destroyed when an application exits. User PS is controlled |
+by the TSP of the application. 'System' persistent storage is controlled by |
+the TCS and stays valid across application lifetimes, \fBtcsd\fR restarts and |
+system resets. Data registered in system PS stays valid until an application |
+requests that it be removed. User PS files are by default stored as |
+/var/tpm/user.{pid} and the system PS file by default is /var/tpm/system.data. |
+The system PS file is initially created when ownership of the TPM is first |
+taken. |
+ |
+.SH "CONFIGURATION" |
+\fBtcsd\fR configuration is stored by default in /etc/tcsd.conf |
+ |
+.SH "DEBUG OUTPUT" |
+If TrouSerS has been compiled with debugging enabled, the debugging output |
+can be supressed by setting the TSS_DEBUG_OFF environment variable. |
+ |
+.SH "DEVICE DRIVERS" |
+.PP |
+\fBtcsd\fR is compatible with the IBM Research TPM device driver available |
+from http://www.research.ibm.com/gsal/tcpa and the TPM device driver available |
+from http://sf.net/projects/tmpdd |
+ |
+.SH "CONFORMING TO" |
+.PP |
+\fBtcsd\fR conforms to the Trusted Computing Group Software |
+Specification version 1.1 Golden |
+ |
+.SH "SEE ALSO" |
+.PP |
+\fBtcsd.conf\fR(5) |
+ |
+.SH "AUTHOR" |
+Kent Yoder |
+ |
+.SH "REPORTING BUGS" |
+Report bugs to <trousers-tech@lists.sf.net> |