The Wayback Machine - https://web.archive.org/web/20220310204908/https://github.com/shpedoikal/tpm-luks/commits/master
Skip to content
Permalink
master

Commits on May 23, 2013

  1. configure: detect CentOS 6 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed May 23, 2013
    3fa3ea4

Commits on May 20, 2013

  1. email addresses: updated 

    Signed-off-by: Kent Yoder <shpedoikal@gmail.com>
    Kent Yoder committed May 20, 2013
    b325907

Commits on Apr 15, 2013

  1. tpm-luks: add support for -a, add a key to LUKS device from NVRAM 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Apr 15, 2013
    80c3c5d

  2. tpm-luks: allow reading from authless and ownerauth indexes 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Apr 15, 2013
    b5a1a24

  3. turn off debugging 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Apr 15, 2013
    13c821c

  4. Support for different NV perms; support for reading authless indexes 

    Updated tpm-luks to allow any combination of NV perms and passing the
well known password. Also updated Fedora 17's dract scripts to allow
reading authless indexes.

Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Apr 15, 2013
    d2527ca

Commits on Apr 10, 2013

  1. Fedora 18 support 

    Not-really-signed-off-by: Ryan Harper <ryanh@linux.vnet.ibm.com>
Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Ryan Harper authored and Kent Yoder committed Apr 10, 2013
    a12cd82

Commits on Nov 27, 2012

  1. tpm-luks: fix passing in a slot id on create 

    Passing in an explicit slot id didn't work on a create operation.

Tweak README.

Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 27, 2012
    29c28e1

  2. conf: generate tpm-luks.conf correctly 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 27, 2012
    048c3d4

  3. yum update hook: add comment on updates to the grub package 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 27, 2012
    70ac14a

  4. remove debug switch from RHEL cryptroot-ask-tpm.sh 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 27, 2012
    526b980

Commits on Nov 26, 2012

  1. tpm-luks: 0.8 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 26, 2012
    206ff84

  2. scripts: remove debugging 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 26, 2012
    ad675c0

  3. tpm-luks: updates for tpm-luks 

    - Support NVRAM area of any size
- Add PCRs 8 & 9 to the tgrub root of trust
- Only calculate the root of trust for the default grub menu.lst entry
- Update tpm-luks-init and tpm-luks-update to operate on tpm-luks.conf
entries only.

Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 26, 2012
    f272c3e

  4. tpm-luks: move to use /dev/shm as the tmpfs mount 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 26, 2012
    4a2a909

  5. tpm-luks: moving towards a new design for secrets bound to PCRs 

    The script used to generate future PCR values is root of trust
specific. Right now the only supported root of trust is based on
Trusted GrUB. Since tpm-luks.conf references tgrub PCR setup, move
that info into the tgrub-specific script to make way for a root of
trust-agnostic model.

Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 26, 2012
    af9922e

Commits on Nov 12, 2012

  1. AUTHORS: updated 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 12, 2012
    f9f024e

  2. dracut: cleanup init scripts 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 12, 2012
    f5ecf9e

  3. BUILD: updated 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 12, 2012
    a21a3bb

  4. README: updated 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 12, 2012
    2237a16

  5. Fedora 17: updates 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 12, 2012
    0dafee7

Commits on Nov 9, 2012

  1. README: updated 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 9, 2012
    156a789

Commits on Nov 6, 2012

  1. tpm-luks-init: add some status messages 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 6, 2012
    5b4705b

  2. swtpm-utils/Makefile.am: install binaries in /usr/bin by default 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 6, 2012
    db024d0

Commits on Nov 5, 2012

  1. tpm-luks-gen-tgrub-pcr-values: check for PCR measurement file existence 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    26c8668

  2. Makefile.am: set sysconfdir to /etc 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    9b9c7cb

  3. README, gitignore: updates 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    8481507

  4. tpm-luks-gen-tgrub-pcr-values: added comment 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    9a2b5ef

  5. tpm-luks.conf: add drtm-authorities-details profile 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    93e8a4b

  6. tpm-luks-init: fixes 

    Don't pass arguments to dracut, let it use the dracut tpm-luks.conf
file. Also, don't pass -p to tpm-luks if the NVRAM permissions file
was actually created by tpm-luks-gen-tgrub-pcr-values.

Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    b616691

  7. tpm-luks-update: only migrate if NV permissions changed 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    d5f8331

  8. tpm-luks-parse-config.in: hard-code to store conf file in /etc 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    c8ce625

  9. tpm-luks: add -q for random source 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    4ac21d2

  10. tpm-luks: move tmpfs mount to /dev/shm 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 5, 2012
    3a63c53

Commits on Nov 2, 2012

  1. tpm-luks: lots of small updates 

    Signed-off-by: Kent Yoder <key@linux.vnet.ibm.com>
    Kent Yoder committed Nov 2, 2012
    cfed491
Older