OLD | NEW |
1 /* Software-Based Trusted Platform Module (TPM) Emulator for Linux | 1 /* Software-based Trusted Platform Module (TPM) Emulator |
2 * Copyright (C) 2006 Mario Strasser <mast@gmx.net>, | 2 * Copyright (C) 2004-2010 Mario Strasser <mast@gmx.net> |
3 * Swiss Federal Institute of Technology (ETH) Zurich | |
4 * | 3 * |
5 * This program is free software; you can redistribute it and/or modify | 4 * This program is free software; you can redistribute it and/or modify |
6 * it under the terms of the GNU General Public License as published | 5 * it under the terms of the GNU General Public License as published |
7 * by the Free Software Foundation; either version 2 of the License, | 6 * by the Free Software Foundation; either version 2 of the License, |
8 * or (at your option) any later version. | 7 * or (at your option) any later version. |
9 * | 8 * |
10 * This program is distributed in the hope that it will be useful, | 9 * This program is distributed in the hope that it will be useful, |
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of | 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of |
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | 11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
13 * GNU General Public License for more details. | 12 * GNU General Public License for more details. |
14 * | 13 * |
15 * $Id$ | 14 * $Id: tpmd.c 405 2010-02-18 23:11:31Z mast $ |
16 */ | 15 */ |
17 | 16 |
18 #include <stdio.h> | 17 #include <stdio.h> |
19 #include <stdlib.h> | 18 #include <stdlib.h> |
20 #include <unistd.h> | 19 #include <unistd.h> |
21 #include <signal.h> | 20 #include <signal.h> |
22 #include <string.h> | 21 #include <string.h> |
23 #include <errno.h> | 22 #include <errno.h> |
24 #include <syslog.h> | 23 #include <syslog.h> |
25 #include <stdarg.h> | 24 #include <stdarg.h> |
26 #include <fcntl.h> | 25 #include <fcntl.h> |
27 #include <sys/stat.h> | 26 #include <sys/stat.h> |
28 #include <sys/time.h> | 27 #include <sys/time.h> |
29 #include <sys/socket.h> | 28 #include <sys/socket.h> |
30 #include <sys/un.h> | 29 #include <sys/un.h> |
31 #include <pwd.h> | 30 #include <pwd.h> |
32 #include <grp.h> | 31 #include <grp.h> |
33 #include "config.h" | 32 #include "config.h" |
34 #include "tpm/tpm_emulator.h" | 33 #include "tpm/tpm_emulator.h" |
35 | 34 |
36 #define TPM_COMMAND_TIMEOUT 30 | 35 #define TPM_COMMAND_TIMEOUT 30 |
37 #define TPM_RANDOM_DEVICE "/dev/urandom" | 36 #define TPM_RANDOM_DEVICE "/dev/urandom" |
38 | 37 |
39 static volatile int stopflag = 0; | 38 static volatile int stopflag = 0; |
40 static int is_daemon = 0; | 39 static int is_daemon = 0; |
41 static int opt_debug = 0; | 40 static int opt_debug = 0; |
42 static int opt_foreground = 0; | 41 static int opt_foreground = 0; |
43 static const char *opt_socket_name = TPM_SOCKET_NAME; | 42 static const char *opt_socket_name = TPM_SOCKET_NAME; |
44 static const char *opt_storage_file = TPM_STORAGE_NAME; | 43 static const char *opt_storage_file = TPM_STORAGE_NAME; |
45 | |
46 static uid_t opt_uid = 0; | 44 static uid_t opt_uid = 0; |
47 static gid_t opt_gid = 0; | 45 static gid_t opt_gid = 0; |
48 static int tpm_startup = 2; | 46 static int tpm_startup = 2; |
| 47 static uint32_t tpm_config = 0; |
49 static int rand_fh; | 48 static int rand_fh; |
50 | 49 |
51 void *tpm_malloc(size_t size) | 50 void *tpm_malloc(size_t size) |
52 { | 51 { |
53 return malloc(size); | 52 return malloc(size); |
54 } | 53 } |
55 | 54 |
56 void tpm_free(/*const*/ void *ptr) | 55 void tpm_free(/*const*/ void *ptr) |
57 { | 56 { |
58 if (ptr != NULL) free((void*)ptr); | 57 if (ptr != NULL) free((void*)ptr); |
59 } | 58 } |
60 | 59 |
61 void tpm_log(int priority, const char *fmt, ...) | 60 void tpm_log(int priority, const char *fmt, ...) |
62 { | 61 { |
63 va_list ap, bp; | 62 va_list ap, bp; |
64 va_start(ap, fmt); | 63 va_start(ap, fmt); |
65 va_copy(bp, ap); | 64 va_copy(bp, ap); |
66 vsyslog(priority, fmt, ap); | 65 switch (priority) { |
| 66 case TPM_LOG_DEBUG: |
| 67 vsyslog(LOG_DEBUG, fmt, ap); |
| 68 break; |
| 69 case TPM_LOG_ERROR: |
| 70 vsyslog(LOG_ERR, fmt, ap); |
| 71 break; |
| 72 case TPM_LOG_INFO: |
| 73 default: |
| 74 vsyslog(LOG_INFO, fmt, ap); |
| 75 break; |
| 76 } |
67 va_end(ap); | 77 va_end(ap); |
68 if (!is_daemon && (priority != LOG_DEBUG || opt_debug)) { | 78 if (!is_daemon && (priority != TPM_LOG_DEBUG || opt_debug)) { |
69 vprintf(fmt, bp); | 79 vprintf(fmt, bp); |
70 } | 80 } |
71 va_end(bp); | 81 va_end(bp); |
72 } | 82 } |
73 | 83 |
74 void tpm_get_extern_random_bytes(void *buf, size_t nbytes) | 84 void tpm_get_extern_random_bytes(void *buf, size_t nbytes) |
75 { | 85 { |
76 uint8_t *p = (uint8_t*)buf; | 86 uint8_t *p = (uint8_t*)buf; |
77 ssize_t res; | 87 ssize_t res; |
78 while (nbytes > 0) { | 88 while (nbytes > 0) { |
79 res = read(rand_fh, p, nbytes); | 89 res = read(rand_fh, p, nbytes); |
(...skipping 16 matching lines...) Expand all Loading... |
96 } | 106 } |
97 | 107 |
98 int tpm_write_to_storage(uint8_t *data, size_t data_length) | 108 int tpm_write_to_storage(uint8_t *data, size_t data_length) |
99 { | 109 { |
100 int fh; | 110 int fh; |
101 ssize_t res; | 111 ssize_t res; |
102 fh = open(opt_storage_file, O_WRONLY | O_TRUNC | O_CREAT, S_IRUSR | S_IWUSR)
; | 112 fh = open(opt_storage_file, O_WRONLY | O_TRUNC | O_CREAT, S_IRUSR | S_IWUSR)
; |
103 if (fh < 0) return -1; | 113 if (fh < 0) return -1; |
104 while (data_length > 0) { | 114 while (data_length > 0) { |
105 res = write(fh, data, data_length); | 115 res = write(fh, data, data_length); |
106 » if (res < 0) { | 116 if (res < 0) { |
107 » close(fh); | 117 close(fh); |
108 » return -1; | 118 return -1; |
109 » } | 119 } |
110 » data_length -= res; | 120 data_length -= res; |
111 » data += res; | 121 data += res; |
112 } | 122 } |
113 close(fh); | 123 close(fh); |
114 return 0; | 124 return 0; |
115 } | 125 } |
116 | 126 |
117 int tpm_read_from_storage(uint8_t **data, size_t *data_length) | 127 int tpm_read_from_storage(uint8_t **data, size_t *data_length) |
118 { | 128 { |
119 int fh; | 129 int fh; |
120 ssize_t res; | 130 ssize_t res; |
121 size_t total_length; | 131 size_t total_length; |
122 fh = open(opt_storage_file, O_RDONLY); | 132 fh = open(opt_storage_file, O_RDONLY); |
123 if (fh < 0) return -1; | 133 if (fh < 0) return -1; |
124 total_length = lseek(fh, 0, SEEK_END); | 134 total_length = lseek(fh, 0, SEEK_END); |
125 lseek(fh, 0, SEEK_SET); | 135 lseek(fh, 0, SEEK_SET); |
126 *data = tpm_malloc(total_length); | 136 *data = tpm_malloc(total_length); |
127 if (*data == NULL) { | 137 if (*data == NULL) { |
128 close(fh); | 138 close(fh); |
129 return -1; | 139 return -1; |
130 } | 140 } |
131 *data_length = 0; | 141 *data_length = 0; |
132 while (total_length > 0) { | 142 while (total_length > 0) { |
133 res = read(fh, &(*data)[*data_length], total_length); | 143 res = read(fh, &(*data)[*data_length], total_length); |
134 » if (res < 0) { | 144 if (res < 0) { |
135 » close(fh); | 145 close(fh); |
136 » tpm_free(*data); | 146 tpm_free(*data); |
137 » return -1; | 147 return -1; |
138 » } | 148 } |
| 149 if (res == 0) break; |
139 *data_length += res; | 150 *data_length += res; |
140 » total_length -= res; | 151 total_length -= res; |
141 } | 152 } |
142 close(fh); | 153 close(fh); |
143 return 0; | 154 return 0; |
144 } | 155 } |
145 | 156 |
146 static void print_usage(char *name) | 157 static void print_usage(char *name) |
147 { | 158 { |
148 printf("usage: %s [-d] [-f] [-s storage file] [-u unix socket name] " | 159 printf("usage: %s [-d] [-f] [-s storage file] [-u unix socket name] " |
149 "[-o user name] [-g group name] [-h] [startup mode]\n", name); | 160 "[-o user name] [-g group name] [-h] [startup mode]\n", name); |
150 printf(" d : enable debug mode\n"); | 161 printf(" d : enable debug mode\n"); |
151 printf(" f : forces the application to run in the foreground\n"); | 162 printf(" f : forces the application to run in the foreground\n"); |
152 printf(" s : storage file to use (default: %s)\n", opt_storage_file); | 163 printf(" s : storage file to use (default: %s)\n", opt_storage_file); |
153 printf(" u : unix socket name to use (default: %s)\n", opt_socket_name); | 164 printf(" u : unix socket name to use (default: %s)\n", opt_socket_name); |
154 printf(" o : effective user the application should run as\n"); | 165 printf(" o : effective user the application should run as\n"); |
155 printf(" g : effective group the application should run as\n"); | 166 printf(" g : effective group the application should run as\n"); |
156 printf(" h : print this help message\n"); | 167 printf(" h : print this help message\n"); |
157 printf(" startup mode : must be 'clear', " | 168 printf(" startup mode : must be 'clear', " |
158 "'save' (default) or 'deactivated\n"); | 169 "'save' (default) or 'deactivated\n"); |
159 } | 170 } |
160 | 171 |
161 static void parse_options(int argc, char **argv) | 172 static void parse_options(int argc, char **argv) |
162 { | 173 { |
163 char c; | 174 char c; |
164 struct passwd *pwd; | 175 struct passwd *pwd; |
165 struct group *grp; | 176 struct group *grp; |
166 opt_uid = getuid(); | 177 opt_uid = getuid(); |
167 opt_gid = getgid(); | 178 opt_gid = getgid(); |
168 info("parsing options"); | 179 info("parsing options"); |
169 while ((c = getopt (argc, argv, "dfs:u:o:g:h")) != -1) { | 180 while ((c = getopt (argc, argv, "dfs:u:o:g:c:h")) != -1) { |
170 debug("handling option '-%c'", c); | 181 debug("handling option '-%c'", c); |
171 switch (c) { | 182 switch (c) { |
172 case 'd': | 183 case 'd': |
173 opt_debug = 1; | 184 opt_debug = 1; |
174 setlogmask(setlogmask(0) | LOG_MASK(LOG_DEBUG)); | 185 setlogmask(setlogmask(0) | LOG_MASK(LOG_DEBUG)); |
175 debug("debug mode enabled"); | 186 debug("debug mode enabled"); |
176 break; | 187 break; |
177 case 'f': | 188 case 'f': |
178 debug("application is forced to run in foreground"); | 189 debug("application is forced to run in foreground"); |
179 opt_foreground = 1; | 190 opt_foreground = 1; |
(...skipping 15 matching lines...) Expand all Loading... |
195 opt_uid = pwd->pw_uid; | 206 opt_uid = pwd->pw_uid; |
196 break; | 207 break; |
197 case 'g': | 208 case 'g': |
198 grp = getgrnam(optarg); | 209 grp = getgrnam(optarg); |
199 if (grp == NULL) { | 210 if (grp == NULL) { |
200 error("invalid group name '%s'\n", optarg); | 211 error("invalid group name '%s'\n", optarg); |
201 exit(EXIT_FAILURE); | 212 exit(EXIT_FAILURE); |
202 } | 213 } |
203 opt_gid = grp->gr_gid; | 214 opt_gid = grp->gr_gid; |
204 break; | 215 break; |
| 216 case 'c': |
| 217 tpm_config = strtol(optarg, NULL, 0); |
| 218 break; |
205 case '?': | 219 case '?': |
206 error("unknown option '-%c'", optopt); | 220 error("unknown option '-%c'", optopt); |
207 print_usage(argv[0]); | 221 print_usage(argv[0]); |
208 exit(EXIT_FAILURE); | 222 exit(EXIT_FAILURE); |
209 case 'h': | 223 case 'h': |
210 default: | 224 default: |
211 print_usage(argv[0]); | 225 print_usage(argv[0]); |
212 exit(EXIT_SUCCESS); | 226 exit(EXIT_SUCCESS); |
213 } | 227 } |
214 } | 228 } |
(...skipping 157 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
372 socklen_t addr_len; | 386 socklen_t addr_len; |
373 fd_set rfds; | 387 fd_set rfds; |
374 struct timeval tv; | 388 struct timeval tv; |
375 | 389 |
376 info("staring main loop"); | 390 info("staring main loop"); |
377 /* open UNIX socket */ | 391 /* open UNIX socket */ |
378 sock = init_socket(opt_socket_name); | 392 sock = init_socket(opt_socket_name); |
379 if (sock < 0) exit(EXIT_FAILURE); | 393 if (sock < 0) exit(EXIT_FAILURE); |
380 /* init tpm emulator */ | 394 /* init tpm emulator */ |
381 mkdirs(opt_storage_file); | 395 mkdirs(opt_storage_file); |
382 debug("initializing TPM emulator: %d", tpm_startup); | 396 debug("initializing TPM emulator"); |
383 tpm_emulator_init(tpm_startup); | 397 tpm_emulator_init(tpm_startup, tpm_config); |
384 /* start command processing */ | 398 /* start command processing */ |
385 while (!stopflag) { | 399 while (!stopflag) { |
386 /* wait for incomming connections */ | 400 /* wait for incomming connections */ |
387 debug("waiting for connections..."); | 401 debug("waiting for connections..."); |
388 FD_ZERO(&rfds); | 402 FD_ZERO(&rfds); |
389 FD_SET(sock, &rfds); | 403 FD_SET(sock, &rfds); |
390 tv.tv_sec = 10; | 404 tv.tv_sec = 10; |
391 tv.tv_usec = 0; | 405 tv.tv_usec = 0; |
392 res = select(sock + 1, &rfds, NULL, NULL, &tv); | 406 res = select(sock + 1, &rfds, NULL, NULL, &tv); |
393 if (res < 0) { | 407 if (res < 0) { |
(...skipping 32 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
426 } | 440 } |
427 in_len = read(fh, in, sizeof(in)); | 441 in_len = read(fh, in, sizeof(in)); |
428 if (in_len > 0) { | 442 if (in_len > 0) { |
429 debug("received %d bytes", in_len); | 443 debug("received %d bytes", in_len); |
430 out = NULL; | 444 out = NULL; |
431 res = tpm_handle_command(in, in_len, &out, &out_len); | 445 res = tpm_handle_command(in, in_len, &out, &out_len); |
432 if (res < 0) { | 446 if (res < 0) { |
433 error("tpm_handle_command() failed"); | 447 error("tpm_handle_command() failed"); |
434 } else { | 448 } else { |
435 debug("sending %d bytes", out_len); | 449 debug("sending %d bytes", out_len); |
436 while (out_len > 0) { | 450 uint32_t len = 0; |
437 res = write(fh, out, out_len); | 451 while (len < out_len) { |
| 452 res = write(fh, &out[len], out_len - len); |
438 if (res < 0) { | 453 if (res < 0) { |
439 error("write(%d) failed: %s", out_len, strerror(errn
o)); | 454 error("write(%d) failed: %s", |
| 455 out_len - len, strerror(errno)); |
440 break; | 456 break; |
441 } | 457 } |
442 out_len»-= res; | 458 len += res; |
443 } | 459 } |
444 tpm_free(out); | 460 tpm_free(out); |
445 } | 461 } |
446 } | 462 } |
447 } while (in_len > 0); | 463 } while (in_len > 0); |
448 close(fh); | 464 close(fh); |
449 } | 465 } |
450 /* shutdown tpm emulator */ | 466 /* shutdown tpm emulator */ |
451 tpm_emulator_shutdown(); | 467 tpm_emulator_shutdown(); |
452 /* close socket */ | 468 /* close socket */ |
453 close(sock); | 469 close(sock); |
454 unlink(opt_socket_name); | 470 unlink(opt_socket_name); |
455 info("main loop stopped"); | 471 info("main loop stopped"); |
456 } | 472 } |
457 | 473 |
458 int main(int argc, char **argv) | 474 int main(int argc, char **argv) |
459 { | 475 { |
460 openlog(argv[0], 0, LOG_DAEMON); | 476 openlog(argv[0], 0, LOG_DAEMON); |
461 setlogmask(~LOG_MASK(LOG_DEBUG)); | 477 setlogmask(~LOG_MASK(LOG_DEBUG)); |
462 syslog(LOG_INFO, "--- separator ---\n"); | 478 syslog(LOG_INFO, "--- separator ---\n"); |
463 info("starting TPM Emulator daemon (1.2.%d.%d-%d)", | 479 info("starting TPM Emulator daemon (1.2.%d.%d-%d)", |
464 VERSION_MAJOR, VERSION_MINOR, VERSION_BUILD); | 480 VERSION_MAJOR, VERSION_MINOR, VERSION_BUILD); |
465 parse_options(argc, argv); | 481 parse_options(argc, argv); |
466 /* switch uid/gid if required */ | 482 /* switch uid/gid if required */ |
467 switch_uid_gid(); | 483 switch_uid_gid(); |
468 /* open random device */ | |
469 init_random(); | |
470 /* init signal handlers */ | 484 /* init signal handlers */ |
471 init_signal_handler(); | 485 init_signal_handler(); |
472 /* unless requested otherwiese, fork and daemonize process */ | 486 /* unless requested otherwiese, fork and daemonize process */ |
473 if (!opt_foreground) daemonize(); | 487 if (!opt_foreground) daemonize(); |
| 488 /* open random device */ |
| 489 init_random(); |
474 /* start main processing loop */ | 490 /* start main processing loop */ |
475 main_loop(); | 491 main_loop(); |
476 info("stopping TPM Emulator daemon"); | 492 info("stopping TPM Emulator daemon"); |
| 493 close(rand_fh); |
477 closelog(); | 494 closelog(); |
478 return 0; | 495 return EXIT_SUCCESS; |
479 } | 496 } |
OLD | NEW |