service,cryptohome: wire up lockbox to dbus

cryptohome.cc

 // Copyright (c) 2009 The Chromium OS Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // Cryptohome client that uses the dbus client interface
 
 #include <openssl/err.h>
 #include <openssl/evp.h>
 #include <openssl/rand.h>
 #include <openssl/sha.h>
@@ skipping 31 matching lines @@
     "migrate_key",
     "remove",
     "obfuscate_user",
     "dump_keyset",
     "tpm_status",
     "status",
     "remove_tracked_subdirs",
     "tpm_take_ownership",
     "tpm_clear_stored_password",
     "tpm_wait_ownership",
+    "install_attributes_test",
     NULL };
   enum ActionEnum {
     ACTION_MOUNT,
     ACTION_MOUNT_GUEST,
     ACTION_UNMOUNT,
     ACTION_MOUNTED,
     ACTION_TEST_AUTH,
     ACTION_MIGRATE_KEY,
     ACTION_REMOVE,
     ACTION_OBFUSCATE_USER,
     ACTION_DUMP_KEYSET,
     ACTION_TPM_STATUS,
     ACTION_STATUS,
     ACTION_REMOVE_TRACKED_SUBDIRS,
     ACTION_TPM_TAKE_OWNERSHIP,
     ACTION_TPM_CLEAR_STORED_PASSWORD,
-    ACTION_TPM_WAIT_OWNERSHIP };
+    ACTION_TPM_WAIT_OWNERSHIP,
+    ACTION_INSTALL_ATTRIBUTES_TEST };

[gauravsh, 2011/04/14 07:39:52]

Can you make this more general instead of making this a test driver. Something
like.

ACTION_INSTALL_ATTRIBUTES_INIT
ACTION_INSTALL_ATTRIBUTES_ADD
ACTION_INSTALL_ATTRIBUTES_LIST
ACTION_INSTALL_ATTRIBUTES_FINALIZE

I think it'd be useful for your testing as well be consistent of how all the
other options for cryptohome --action work.

[Will Drewry, 2011/04/15 01:31:49]

Done.

   static const char kUserSwitch[] = "user";
   static const char kPasswordSwitch[] = "password";
   static const char kOldPasswordSwitch[] = "old_password";
   static const char kForceSwitch[] = "force";
   static const char kAsyncSwitch[] = "async";
   static const char kCreateSwitch[] = "create";
 }  // namespace switches
 
 chromeos::Blob GetSystemSalt(const chromeos::dbus::Proxy& proxy) {
   chromeos::glib::ScopedError error;
@@ skipping 494 matching lines @@
       blob.resize(serialized.tpm_public_key_hash().length());
       serialized.tpm_public_key_hash().copy(static_cast<char*>(blob.data()),
                                             serialized.tpm_key().length(), 0);
       printf("  TPM Public Key Hash:\n");
       printf("    %s\n", chromeos::AsciiEncode(blob).c_str());
     }
     if (serialized.has_password_rounds()) {
       printf("  Password rounds:\n");
       printf("    %d\n", serialized.password_rounds());
     }
     if (serialized.has_last_activity_timestamp()) {

[gauravsh, 2011/04/14 07:39:52]

believe this is not a part of your CL, right?

[Will Drewry, 2011/04/15 01:31:49]

Done.

       const base::Time last_activity =
           base::Time::FromInternalValue(serialized.last_activity_timestamp());
       printf("  Last activity (days ago):\n");
       printf("    %d\n", (base::Time::Now() - last_activity).InDays());
     }
   } else if (!strcmp(switches::kActions[switches::ACTION_TPM_STATUS],
                      action.c_str())) {
     chromeos::glib::ScopedError error;
     gboolean result = false;
     if (!org_chromium_CryptohomeInterface_tpm_is_enabled(proxy.gproxy(),
@@ skipping 74 matching lines @@
   } else if (!strcmp(
       switches::kActions[switches::ACTION_TPM_CLEAR_STORED_PASSWORD],
       action.c_str())) {
     chromeos::glib::ScopedError error;
     if (!org_chromium_CryptohomeInterface_tpm_clear_stored_password(
         proxy.gproxy(),
         &chromeos::Resetter(&error).lvalue())) {
       printf("TpmClearStoredPassword call failed: %s.\n", error->message);
     }
   } else if (!strcmp(
+      switches::kActions[switches::ACTION_INSTALL_ATTRIBUTES_TEST],
+      action.c_str())) {
+    chromeos::glib::ScopedError error;
+    gboolean result;
+    if (!org_chromium_CryptohomeInterface_install_attributes_is_ready(
+        proxy.gproxy(),
+        &result,
+        &chromeos::Resetter(&error).lvalue())) {
+      printf("IsReady call failed: %s.\n", error->message);
+    }
+    if (result == FALSE) {
+      printf("Not ready.\n");
+      return 1;
+    }
+    printf("Ready!\n");
+    if (!org_chromium_CryptohomeInterface_install_attributes_is_first_install(
+        proxy.gproxy(),
+        &result,
+        &chromeos::Resetter(&error).lvalue())) {
+      printf("IsFirstInstall() call failed: %s.\n", error->message);
+    }
+    bool is_first_install = result;
+    printf("First Install? %d\n", result);
+    const char* kTestNameA = "Test.IsManaged";
+    const char* kTestValueA = "TRUE";
+    const char* kTestNameB = "Test.Foo";
+    const char* kTestValueB = "Bar";
+    if (is_first_install) {
+      // Set a value!
+      GArray *value = g_array_new(FALSE, FALSE, sizeof(char));
+      g_array_append_vals(value, kTestValueA, strlen(kTestValueA));
+      if (!org_chromium_CryptohomeInterface_install_attributes_set(
+         proxy.gproxy(),
+         kTestNameA,
+         value,
+         &result,
+         &chromeos::Resetter(&error).lvalue())) {
+        printf("Set() failed: %s.\n", error->message);
+      }
+      g_array_free(value, false);
+      printf("Set(%s,%s): %d\n", kTestNameA, kTestValueA, result);
+      // Set a value!
+      value = g_array_new(FALSE, FALSE, sizeof(char));
+      g_array_append_vals(value, kTestValueB, strlen(kTestValueB));
+      if (!org_chromium_CryptohomeInterface_install_attributes_set(
+         proxy.gproxy(),
+         kTestNameB,
+         value,
+         &result,
+         &chromeos::Resetter(&error).lvalue())) {
+        printf("Set() failed: %s.\n", error->message);
+      }
+      g_array_free(value, false);
+      printf("Set(%s,%s): %d\n", kTestNameB, kTestValueB, result);
+    }
+    // Grab the value and emit it.
+    // Set a value!
+    GArray *value = NULL;
+    if (!org_chromium_CryptohomeInterface_install_attributes_get(
+        proxy.gproxy(),
+        kTestNameA,
+        &value,
+        &result,
+        &chromeos::Resetter(&error).lvalue())) {
+       printf("Get() failed: %s.\n", error->message);
+    }
+    std::string value_str(value->data, value->len);
+    printf("Get(%s,%s): %d\n", kTestNameA, value_str.c_str(), result);
+    g_array_free(value, false);
+    if (!is_first_install)
+      return 0;
+    // Lock it down.
+    if (!org_chromium_CryptohomeInterface_install_attributes_finalize(
+        proxy.gproxy(),
+        &result,
+        &chromeos::Resetter(&error).lvalue())) {
+      printf("Finalize() failed: %s.\n", error->message);
+    }
+    printf("Finalize(): %d\n", result);
+  } else if (!strcmp(
       switches::kActions[switches::ACTION_TPM_WAIT_OWNERSHIP],
       action.c_str())) {
     TpmWaitLoop client_loop;
     client_loop.Initialize(proxy);
     gboolean result;
     chromeos::glib::ScopedError error;
     if (!org_chromium_CryptohomeInterface_tpm_is_being_owned(proxy.gproxy(),
         &result,
         &chromeos::Resetter(&error).lvalue())) {
       printf("TpmIsBeingOwned call failed: %s.\n", error->message);
     } else {
       if (result) {
         printf("Waiting for TPM to be owned...\n");
         client_loop.Run();
       } else {
         printf("TPM is not currently being owned.\n");
       }
     }
   } else {
     printf("Unknown action or no action given.  Available actions:\n");
     for(int i = 0; /* loop forever */; i++) {
       if(!switches::kActions[i]) {
         break;
       }
       printf("  --action=%s\n", switches::kActions[i]);
     }
   }
   return 0;
 }