Change to use a unix socket instead of TCP.

src/tcs/rpc/tcstp/rpc.c

 
 /*
  * Licensed Materials - Property of IBM
  *
  * trousers - An open source TCG Software Stack
  *
  * (C) Copyright International Business Machines Corp. 2004-2007
  *
  */
 
@@ skipping 498 matching lines @@
         {tcs_wrap_CMK_CreateBlob,"CMK_CreateBlob"},
         {tcs_wrap_CMK_ConvertMigration,"CMK_ConvertMigration"},
         {tcs_wrap_FlushSpecific,"FlushSpecific"}, /* 120 */
         {tcs_wrap_KeyControlOwner, "KeyControlOwner"},
         {tcs_wrap_DSAP, "DSAP"}
 };
 
 int
 access_control(struct tcsd_thread_data *thread_data)
 {
-        int i = 0;
-        struct hostent *local_hostent = NULL;
-        static char *localhostname = NULL;
-        static int localhostname_len = 0;
-
-        if (!localhostname) {
-                if ((local_hostent = gethostbyname("localhost")) == NULL) {
-                        LogError("Error resolving localhost: %s", hstrerror(h_errno));
-                        return 1;
-                }
-
-                LogDebugFn("Cached local hostent:");
-                LogDebugFn("h_name: %s", local_hostent->h_name);
-                for (i = 0; local_hostent->h_aliases[i]; i++) {
-                        LogDebugFn("h_aliases[%d]: %s", i, local_hostent->h_aliases[i]);
-                }
-                LogDebugFn("h_addrtype: %s",
-                           (local_hostent->h_addrtype == AF_INET6 ? "AF_INET6" : "AF_INET"));
-
-                localhostname_len = strlen(local_hostent->h_name);
-                if ((localhostname = strdup(local_hostent->h_name)) == NULL) {
-                        LogError("malloc of %d bytes failed.", localhostname_len);
-                        return TCSERR(TSS_E_OUTOFMEMORY);
-                }
-        }
-
-        /* if the request comes from localhost, or is in the accepted ops list,
-         * approve it */
-        if (!strncmp(thread_data->hostname, localhostname,
-                     MIN((size_t)localhostname_len, strlen(thread_data->hostname)))) {
-                return 0;
-        } else {
-                while (tcsd_options.remote_ops[i]) {
-                        if ((UINT32)tcsd_options.remote_ops[i] == thread_data->comm.hdr.u.ordinal) {
-                                LogInfo("Accepted %s operation from %s",
-                                        tcs_func_table[thread_data->comm.hdr.u.ordinal].name,
-                                        thread_data->hostname);
-                                return 0;
-                        }
-                        i++;
-                }
-        }
-
-        return 1;
+        // Unix domain socket, so just allow
+        return 0;
 }
 
 TSS_RESULT
 dispatchCommand(struct tcsd_thread_data *data)
 {
         UINT64 offset;
         TSS_RESULT result;
 
         /* First, check the ordinal bounds */
         if (data->comm.hdr.u.ordinal >= TCSD_MAX_NUM_ORDS) {
@@ skipping 44 matching lines @@
 {
         /* make sure the all the data is present */
         if (data->comm.hdr.num_parms > 0 &&
             data->comm.hdr.packet_size !=
                 (UINT32)(data->comm.hdr.parm_offset + data->comm.hdr.parm_size))
                 return TCSERR(TSS_E_INTERNAL_ERROR);
 
         /* dispatch the command to the TCS */
         return dispatchCommand(data);
 }