cros: Replace "TPM" with "secure module" for machines without TPM.
The new reef devices have a chip that is not a TPM so for these we do not want to display TPM strings. For now duplicate the strings since we need to merge to M58 & M59, but a follow up CL should use placeholders in the strings. There are two locations, adding supervised user and OOBE EULA screen.
TEST=manual
BUG=716671
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:closure_compilation
Review-Url: https://codereview.chromium.org/2856683002
Cr-Commit-Position: refs/heads/master@{#469826}
Committed: https://chromium.googlesource.com/chromium/src/+/6dfb54fcb774508b6679b8d83f0d935232b3a450
3 years, 7 months ago
(2017-05-02 01:33:45 UTC)
#9
Dry run: This issue passed the CQ dry run.
sammiequon
Description was changed from ========== Trybots. BUG= ========== to ========== cros: Replace "TPM" with "secure ...
3 years, 7 months ago
(2017-05-02 16:11:13 UTC)
#10
Description was changed from
==========
Trybots.
BUG=
==========
to
==========
cros: Replace "TPM" with "secure module" for machines without TPM.
The new reef devices have a chip that is not a TPM so for these we do not want
to display TPM strings. For now duplicate the strings since we need to merge to
M58 & M59, but a follow up CL should use placeholders in the strings.
TEST=manual
BUG=716671
==========
Description was changed from ========== cros: Replace "TPM" with "secure module" for machines without TPM. ...
3 years, 7 months ago
(2017-05-02 16:19:53 UTC)
#12
Description was changed from
==========
cros: Replace "TPM" with "secure module" for machines without TPM.
The new reef devices have a chip that is not a TPM so for these we do not want
to display TPM strings. For now duplicate the strings since we need to merge to
M58 & M59, but a follow up CL should use placeholders in the strings.
TEST=manual
BUG=716671
==========
to
==========
cros: Replace "TPM" with "secure module" for machines without TPM.
The new reef devices have a chip that is not a TPM so for these we do not want
to display TPM strings. For now duplicate the strings since we need to merge to
M58 & M59, but a follow up CL should use placeholders in the strings. There are
two locations, adding supervised user and OOBE EULA screen.
TEST=manual
BUG=716671
==========
sammiequon
achuithb@, apronin@ - Please take a look. Thanks!
3 years, 7 months ago
(2017-05-02 16:20:28 UTC)
#13
achuithb@, apronin@ - Please take a look. Thanks!
apronin
The file-checking logic is correct, but I have a comment about proper function naming, and ...
3 years, 7 months ago
(2017-05-02 16:43:39 UTC)
#14
The file-checking logic is correct, but I have a comment about proper function
naming, and some resulting strings seem to require further refining.
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_str...
File chrome/app/chromeos_strings.grdp (right):
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_str...
chrome/app/chromeos_strings.grdp:3528: Your computer contains a secure module
security device, which is used to implement many critical security features in
Chrome OS.
just 'secure module' (drop 'security device')?
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_str...
chrome/app/chromeos_strings.grdp:3543: Secure module chip is disabled or absent.
just 'Secure module' (drop 'chip')?
https://codereview.chromium.org/2856683002/diff/20001/chromeos/tpm/tpm_token_...
File chromeos/tpm/tpm_token_info_getter.cc (right):
https://codereview.chromium.org/2856683002/diff/20001/chromeos/tpm/tpm_token_...
chromeos/tpm/tpm_token_info_getter.cc:23: constexpr char kNoTPMIndicatorFile1[]
=
I'd go with 'NoTPMIndicator' -> 'Cr50UsedIndicator'. Or, ->
'TPMNotUsedIndicator'
https://codereview.chromium.org/2856683002/diff/20001/chromeos/tpm/tpm_token_...
chromeos/tpm/tpm_token_info_getter.cc:71: bool
TPMTokenInfoGetter::DoesTPMExist() {
Does what is supposed to do for the purposes of the patch. But I'd rename and
revert the logic just to minimize potential confusion in the future. In theory,
several chips, including a TPM and an H1 with Cr50 can exist on the same system.
It counts not what exists, but what is used. So, I'd do something like:
bool TPMTokenInfoGetter::IsCr50Used() {
return base::PathExists(base::FilePath(kCr50UsedIndicatorFile1)) ||
base::PathExists(base::FilePath(kCr50UsedIndicatorFile2));
}
Or, at least switch from 'DoesExist' to 'IsUsed', though that may confuse future
readers: are we talking about a security module (which, even in cr50 case, in
everyday life may be referred to as tpm for brevity) not being used and going
with software-based approach, or are we talking about using h1+cr50 instead of a
tpm:
bool TPMTokenInfoGetter::IsTPMUsed() {
return !base::PathExists(base::FilePath(kCr50UsedIndicatorFile1)) &&
!base::PathExists(base::FilePath(kCr50UsedIndicatorFile2));
}
sammiequon
Patchset #2 (id:40001) has been deleted
3 years, 7 months ago
(2017-05-02 17:23:58 UTC)
#15
Patchset #2 (id:40001) has been deleted
sammiequon
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_strings.grdp File chrome/app/chromeos_strings.grdp (right): https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_strings.grdp#newcode3528 chrome/app/chromeos_strings.grdp:3528: Your computer contains a secure module security device, which ...
3 years, 7 months ago
(2017-05-02 17:27:23 UTC)
#16
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_str...
File chrome/app/chromeos_strings.grdp (right):
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_str...
chrome/app/chromeos_strings.grdp:3528: Your computer contains a secure module
security device, which is used to implement many critical security features in
Chrome OS.
On 2017/05/02 16:43:38, apronin wrote:
> just 'secure module' (drop 'security device')?
Done.
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_str...
chrome/app/chromeos_strings.grdp:3543: Secure module chip is disabled or absent.
On 2017/05/02 16:43:38, apronin wrote:
> just 'Secure module' (drop 'chip')?
Done.
Q: Would this affect our plan to combine the two TPM & secure module messages
into one message and use a place holder for M-60? Or will we have to keep them
separate because of this?
https://codereview.chromium.org/2856683002/diff/20001/chromeos/tpm/tpm_token_...
File chromeos/tpm/tpm_token_info_getter.cc (right):
https://codereview.chromium.org/2856683002/diff/20001/chromeos/tpm/tpm_token_...
chromeos/tpm/tpm_token_info_getter.cc:23: constexpr char kNoTPMIndicatorFile1[]
=
On 2017/05/02 16:43:38, apronin wrote:
> I'd go with 'NoTPMIndicator' -> 'Cr50UsedIndicator'. Or, ->
> 'TPMNotUsedIndicator'
Done.
https://codereview.chromium.org/2856683002/diff/20001/chromeos/tpm/tpm_token_...
chromeos/tpm/tpm_token_info_getter.cc:71: bool
TPMTokenInfoGetter::DoesTPMExist() {
On 2017/05/02 16:43:38, apronin wrote:
> Does what is supposed to do for the purposes of the patch. But I'd rename and
> revert the logic just to minimize potential confusion in the future. In
theory,
> several chips, including a TPM and an H1 with Cr50 can exist on the same
system.
> It counts not what exists, but what is used. So, I'd do something like:
>
> bool TPMTokenInfoGetter::IsCr50Used() {
> return base::PathExists(base::FilePath(kCr50UsedIndicatorFile1)) ||
> base::PathExists(base::FilePath(kCr50UsedIndicatorFile2));
> }
>
> Or, at least switch from 'DoesExist' to 'IsUsed', though that may confuse
future
> readers: are we talking about a security module (which, even in cr50 case, in
> everyday life may be referred to as tpm for brevity) not being used and going
> with software-based approach, or are we talking about using h1+cr50 instead of
a
> tpm:
>
> bool TPMTokenInfoGetter::IsTPMUsed() {
> return !base::PathExists(base::FilePath(kCr50UsedIndicatorFile1)) &&
> !base::PathExists(base::FilePath(kCr50UsedIndicatorFile2));
> }
Done.
Thanks! Achuith, could you take a look? Thanks! https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_strings.grdp File chrome/app/chromeos_strings.grdp (right): https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_strings.grdp#newcode3543 chrome/app/chromeos_strings.grdp:3543: Secure ...
3 years, 7 months ago
(2017-05-02 18:27:45 UTC)
#19
Thanks!
Achuith, could you take a look? Thanks!
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_str...
File chrome/app/chromeos_strings.grdp (right):
https://codereview.chromium.org/2856683002/diff/20001/chrome/app/chromeos_str...
chrome/app/chromeos_strings.grdp:3543: Secure module chip is disabled or absent.
On 2017/05/02 18:18:38, apronin1 wrote:
>
> > Q: Would this affect our plan to combine the two TPM & secure module
messages
> > into one message and use a place holder for M-60? Or will we have to keep
them
> > separate because of this?
>
> I'd say in these places we can drop 'chip' and 'security device' for the TPM
> case as well if we want placeholders.
sgtm
https://codereview.chromium.org/2856683002/diff/60001/chrome/app/chromeos_str...
File chrome/app/chromeos_strings.grdp (right):
https://codereview.chromium.org/2856683002/diff/60001/chrome/app/chromeos_str...
chrome/app/chromeos_strings.grdp:2044: <message
name="IDS_CREATE_SUPERVISED_USER_SECURE_MODULE_ERROR" desc="Supervised user
dialog, error page, secure module error during creation, text">
On 2017/05/02 18:18:38, apronin1 wrote:
> btw, this one is actually identical to the tpm text since it only mentions tpm
> in the desc (and there are other places, where tpm is mentioned in desc only,
> which we didn't fix, so I assumed that's not a requirement).
yeah, I noticed this as well, but I thought it would be less confusing to just
move them all
Dry run: Try jobs failed on following builders: win_chromium_x64_rel_ng on master.tryserver.chromium.win (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.win/builders/win_chromium_x64_rel_ng/builds/418128)
3 years, 7 months ago
(2017-05-03 22:47:39 UTC)
#26
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc File chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc (right): https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc#newcode415 chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc:415: ::login::SecureModuleUsed::UNQUERIED) { Can we hide this inside the QuerySecureModuleUsed? ...
3 years, 7 months ago
(2017-05-04 18:26:36 UTC)
#29
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeo...
File chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc
(right):
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeo...
chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc:415:
::login::SecureModuleUsed::UNQUERIED) {
Can we hide this inside the QuerySecureModuleUsed? That is, make it an async
query API.
e.g.
Using GetSecureModuleUsedCallback =
base::OnceCallback<void (SecureModuleUsed secure_module)>;
void GetSecureModuleUsed(GetSecureModuleUsedCallback callback) {
// If we know the result, base::ResetAndReturn(&callback).Run(known_module);
// Otherwise, post task to a blocking pool and get reply.
// However, BrowserThread::GetBlockingPool is deprecated.
// The new way seems to be using
base::PostTaskWithTraitsAndReplyWithResult(
FROM_HERE,
{base::MayBlock(), base::TaskPriority::BACKGROUND,
base::TaskShutdownBehavior::CONTINUE_ON_SHUTDOWN},
base::BindOnce(&GetSecureModuleInfoFromFilesAndCacheIt...),
std::move(callback));
}
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeo...
chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc:417:
content::BrowserThread::IO, FROM_HERE,
IO thread is actually the IPC thread. We should use blocking pool for file
access.
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/ui/webu...
File chrome/browser/ui/webui/chromeos/login/eula_screen_handler.cc (right):
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/ui/webu...
chrome/browser/ui/webui/chromeos/login/eula_screen_handler.cc:250:
GetOobeUI()->UpdateLocalizedStringsIfNeeded();
On 2017/05/04 16:04:47, sammiequon wrote:
> Is there a better approach than updating everything again?
UpdateLocalizedStringsIfNeeded() only reloads when md mode is changed. So it is
probably a no-op here. Also it might cause UI to flicker. How about adding an
explicit JS call something similar to the current reloadContent impl but on JS
side, only do
loadTimeData.overrideValues(data);
i18nTemplate.process(document, loadTimeData);
https://cs.chromium.org/chromium/src/chrome/browser/resources/chromeos/login/...https://codereview.chromium.org/2856683002/diff/100001/components/login/BUILD.gn
File components/login/BUILD.gn (right):
https://codereview.chromium.org/2856683002/diff/100001/components/login/BUILD...
components/login/BUILD.gn:14: "secure_module_util.h",
On 2017/05/04 16:04:47, sammiequon wrote:
> What is the best folder too put these files?
I am fine with putting it here.
sammiequon
Description was changed from ========== cros: Replace "TPM" with "secure module" for machines without TPM. ...
3 years, 7 months ago
(2017-05-04 22:27:28 UTC)
#30
Description was changed from
==========
cros: Replace "TPM" with "secure module" for machines without TPM.
The new reef devices have a chip that is not a TPM so for these we do not want
to display TPM strings. For now duplicate the strings since we need to merge to
M58 & M59, but a follow up CL should use placeholders in the strings. There are
two locations, adding supervised user and OOBE EULA screen.
TEST=manual
BUG=716671
==========
to
==========
cros: Replace "TPM" with "secure module" for machines without TPM.
The new reef devices have a chip that is not a TPM so for these we do not want
to display TPM strings. For now duplicate the strings since we need to merge to
M58 & M59, but a follow up CL should use placeholders in the strings. There are
two locations, adding supervised user and OOBE EULA screen.
TEST=manual
BUG=716671
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:closure_compilation
==========
sammiequon
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc File chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc (right): https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc#newcode415 chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc:415: ::login::SecureModuleUsed::UNQUERIED) { On 2017/05/04 18:26:35, xiyuan wrote: > Can ...
3 years, 7 months ago
(2017-05-04 22:30:42 UTC)
#31
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeo...
File chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc
(right):
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeo...
chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc:415:
::login::SecureModuleUsed::UNQUERIED) {
On 2017/05/04 18:26:35, xiyuan wrote:
> Can we hide this inside the QuerySecureModuleUsed? That is, make it an async
> query API.
>
> e.g.
> Using GetSecureModuleUsedCallback =
> base::OnceCallback<void (SecureModuleUsed secure_module)>;
> void GetSecureModuleUsed(GetSecureModuleUsedCallback callback) {
> // If we know the result,
base::ResetAndReturn(&callback).Run(known_module);
> // Otherwise, post task to a blocking pool and get reply.
> // However, BrowserThread::GetBlockingPool is deprecated.
> // The new way seems to be using
> base::PostTaskWithTraitsAndReplyWithResult(
> FROM_HERE,
> {base::MayBlock(), base::TaskPriority::BACKGROUND,
> base::TaskShutdownBehavior::CONTINUE_ON_SHUTDOWN},
> base::BindOnce(&GetSecureModuleInfoFromFilesAndCacheIt...),
> std::move(callback));
> }
Thanks, yeah I wanted to move the async in there but had some DEPS troubles with
browser_thread.h and pretty sure I did something wrong anyways so wanted your
advices :-).
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/chromeo...
chrome/browser/chromeos/login/supervised/supervised_user_creation_screen.cc:417:
content::BrowserThread::IO, FROM_HERE,
On 2017/05/04 18:26:35, xiyuan wrote:
> IO thread is actually the IPC thread. We should use blocking pool for file
> access.
Acknowledged.
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/ui/webu...
File chrome/browser/ui/webui/chromeos/login/eula_screen_handler.cc (right):
https://codereview.chromium.org/2856683002/diff/100001/chrome/browser/ui/webu...
chrome/browser/ui/webui/chromeos/login/eula_screen_handler.cc:250:
GetOobeUI()->UpdateLocalizedStringsIfNeeded();
On 2017/05/04 18:26:35, xiyuan wrote:
> On 2017/05/04 16:04:47, sammiequon wrote:
> > Is there a better approach than updating everything again?
>
> UpdateLocalizedStringsIfNeeded() only reloads when md mode is changed. So it
is
> probably a no-op here. Also it might cause UI to flicker. How about adding an
> explicit JS call something similar to the current reloadContent impl but on JS
> side, only do
> loadTimeData.overrideValues(data);
> i18nTemplate.process(document, loadTimeData);
>
>
https://cs.chromium.org/chromium/src/chrome/browser/resources/chromeos/login/...
Attempted.
xiyuan
lgtm Thanks.
3 years, 7 months ago
(2017-05-04 22:59:35 UTC)
#32
Try jobs failed on following builders: ios-simulator on master.tryserver.chromium.mac (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.mac/builders/ios-simulator/builds/207968)
3 years, 7 months ago
(2017-05-04 23:57:28 UTC)
#38
Dry run: Try jobs failed on following builders: win_chromium_rel_ng on master.tryserver.chromium.win (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.win/builders/win_chromium_rel_ng/builds/437024)
3 years, 7 months ago
(2017-05-05 16:28:11 UTC)
#46
Dry run: Try jobs failed on following builders: win_chromium_rel_ng on master.tryserver.chromium.win (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.win/builders/win_chromium_rel_ng/builds/437089)
3 years, 7 months ago
(2017-05-05 17:47:30 UTC)
#50
Dry run: Try jobs failed on following builders: linux_android_rel_ng on master.tryserver.chromium.android (JOB_FAILED, https://build.chromium.org/p/tryserver.chromium.android/builders/linux_android_rel_ng/builds/286822)
3 years, 7 months ago
(2017-05-05 21:40:01 UTC)
#60
CQ is committing da patch. Bot data: {"patchset_id": 210001, "attempt_start_ts": 1494020485175970, "parent_rev": "504e47cd10aa741e9315fdd02d8092cb5101dbff", "commit_rev": "6dfb54fcb774508b6679b8d83f0d935232b3a450"}
3 years, 7 months ago
(2017-05-06 00:24:01 UTC)
#64
CQ is committing da patch.
Bot data: {"patchset_id": 210001, "attempt_start_ts": 1494020485175970,
"parent_rev": "504e47cd10aa741e9315fdd02d8092cb5101dbff", "commit_rev":
"6dfb54fcb774508b6679b8d83f0d935232b3a450"}
commit-bot: I haz the power
Description was changed from ========== cros: Replace "TPM" with "secure module" for machines without TPM. ...
3 years, 7 months ago
(2017-05-06 00:24:12 UTC)
#65
Message was sent while issue was closed.
Description was changed from
==========
cros: Replace "TPM" with "secure module" for machines without TPM.
The new reef devices have a chip that is not a TPM so for these we do not want
to display TPM strings. For now duplicate the strings since we need to merge to
M58 & M59, but a follow up CL should use placeholders in the strings. There are
two locations, adding supervised user and OOBE EULA screen.
TEST=manual
BUG=716671
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:closure_compilation
==========
to
==========
cros: Replace "TPM" with "secure module" for machines without TPM.
The new reef devices have a chip that is not a TPM so for these we do not want
to display TPM strings. For now duplicate the strings since we need to merge to
M58 & M59, but a follow up CL should use placeholders in the strings. There are
two locations, adding supervised user and OOBE EULA screen.
TEST=manual
BUG=716671
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:closure_compilation
Review-Url: https://codereview.chromium.org/2856683002
Cr-Commit-Position: refs/heads/master@{#469826}
Committed:
https://chromium.googlesource.com/chromium/src/+/6dfb54fcb774508b6679b8d83f0d...
==========
commit-bot: I haz the power
Committed patchset #8 (id:210001) as https://chromium.googlesource.com/chromium/src/+/6dfb54fcb774508b6679b8d83f0d935232b3a450
3 years, 7 months ago
(2017-05-06 00:24:15 UTC)
#66
Issue 2856683002: cros: Replace "TPM" with "secure module" for machines without TPM.
(Closed)
Created 3 years, 7 months ago by sammiequon
Modified 3 years, 7 months ago
Reviewers: apronin, apronin1, xiyuan
Base URL:
Comments: 25