Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Code reorganization #47

Merged
merged 18 commits into from
Jun 28, 2023
Merged

Code reorganization #47

merged 18 commits into from
Jun 28, 2023

Conversation

SergiiDmytruk
Copy link
Contributor

This PR is on top of #46, will rebase on doing changes there.

This is a preparation of existing code for introducing TPM2 support in #42, it contains:

  • several small changes
  • a bunch of commits that extract TPM-dependent functionality to anti-evil-maid-lib as functions
  • move of TPM-related functions to anti-evil-maid-lib-tpm1 file

My tests on TPM1 without SRK password, with SRK password and with TOTP went without errors.

sbin/anti-evil-maid-install Show resolved Hide resolved
90anti-evil-maid/anti-evil-maid-unseal Outdated Show resolved Hide resolved
sbin/anti-evil-maid-lib-tpm1 Show resolved Hide resolved
anti-evil-maid-check-mount-devs can't have `set -u`.

anti-evil-maid-install needed to be slightly updated for `set -u`.

Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Otherwise in case of error, it stays mounted, but you do anything about
it after leaving initrd.

Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
It's confusing to see a proper password prompt with asterisks after a
"Press ENTER message".

Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
It won't be there for TPM2.

Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
@marmarek marmarek merged commit 1b1b523 into QubesOS:main Jun 28, 2023
@SergiiDmytruk SergiiDmytruk deleted the code-reorganization branch June 28, 2023 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants