review.tizen.org Git - platform/core/security/tef-optee

projects / platform / core / security / tef-optee_client.git / commit

author	Uladzislau Harbuz <u.harbuz@samsung.com>
	Fri, 20 Oct 2017 14:32:47 +0000 (16:32 +0200)
committer	r.tyminski <r.tyminski@partner.samsung.com>
	Thu, 9 Nov 2017 11:55:31 +0000 (12:55 +0100)
commit	04697a519c336eec3917891294626ed3c67603cc
tree	ecba22687ef0b494b0b8eea34ea8c7688fb2cf3f	tree \| snapshot
parent	7000b9bda8dcaa5f36ce9e3b7b213def50d5a744	commit \| diff

Change privileges verification.

Revert 'Implement checking of Tizen policies on TA loading.'
Check privileges by mapping privilege tee.client to priv_tee_client
group. Only application with that privilege will able to use
/dev/tee[0-9] devices.
Set devices /dev/tee[0-9] group to priv_tee_client with udev rule.

Change-Id: I87e476a20434e2022fd4a397f5bd02340940e002

libteec/src/tee_client_api.c		diff \| blob \| history
packaging/tef-optee-client.spec		diff \| blob \| history
systemd/90-teedaemon.rules		diff \| blob \| history
systemd/tef-optee.service.in		diff \| blob \| history
tee-supplicant/Makefile		diff \| blob \| history
tee-supplicant/src/security.c	[deleted file]	blob \| history
tee-supplicant/src/security.h	[deleted file]	blob \| history
tee-supplicant/src/tee_supplicant.c		diff \| blob \| history
tee-supplicant/src/unix_socket.c	[deleted file]	blob \| history
tee-supplicant/src/unix_socket.h	[deleted file]	blob \| history

Domain: Security / Trusted Execution Environment; Licenses: BSD-2-Clause;

RSS Atom