platform/core/security/tef-optee_client.git
6 years agoChange privileges verification. 26/156926/16 accepted/tizen_4.0_unified accepted/tizen/4.0/unified/20171123.184117 accepted/tizen/unified/20171122.071413 submit/tizen/20171121.071320 submit/tizen/20171121.122352 submit/tizen/20171122.053652 submit/tizen_4.0/20171121.071725 submit/tizen_4.0/20171123.051832 tizen_4.0.IoT.p2_release
Uladzislau Harbuz [Fri, 20 Oct 2017 14:32:47 +0000 (16:32 +0200)]
Change privileges verification.

Revert 'Implement checking of Tizen policies on TA loading.'
Check privileges by mapping privilege tee.client to priv_tee_client
group. Only application with that privilege will able to use
/dev/tee[0-9] devices.
Set devices /dev/tee[0-9] group to priv_tee_client with udev rule.

Change-Id: I87e476a20434e2022fd4a397f5bd02340940e002

6 years agoVerify privileges only ones. 06/154106/1 accepted/tizen/4.0/unified/20171012.074517 accepted/tizen/unified/20171012.075101 submit/tizen/20171011.123005 submit/tizen_4.0/20171011.123522 tizen_4.0.IoT.p1_release tizen_4.0.m2_release
r.tyminski [Fri, 6 Oct 2017 15:08:44 +0000 (17:08 +0200)]
Verify privileges only ones.

We verify privileges in tee-supplicant when it loads TA. OpTEE OS loads
TA twice. We need to verify privileges only at the first time.

Change-Id: I0f90b34e648d3b12a62a293d275feaab65e0bc06

6 years agotee-supplicant: Report error on short buffer when loading TA 05/154105/1
Yves Lefloch [Wed, 22 Mar 2017 16:14:07 +0000 (17:14 +0100)]
tee-supplicant: Report error on short buffer when loading TA

Change-Id: Ie1a2a514e302d387d063f5a03cabee944fb4765a
Signed-off-by: Yves Lefloch <YvesMarie_Lefloch@sigmadesigns.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Etienne Carriere <etienne.carriere@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Signed-off-by: Rafal Tyminski <r.tyminski@partner.samsung.com>
6 years agoPackaging changes. 04/154104/1
r.tyminski [Thu, 5 Oct 2017 14:28:12 +0000 (16:28 +0200)]
Packaging changes.

Adding manifest.
Setting root of tee fs to /opt.
Little spec cleanup.
Adding udev and service configuration.
Set SYS_TA_PATH to /usr/lib/tastore
Some fixes for cynara usage.

Change-Id: I2fe99d30d88cc1776380a83308b656445d61cf8f

6 years agoMerge "Allow to define custom tee fs paths." into tizen
r.tyminski [Thu, 5 Oct 2017 05:27:41 +0000 (05:27 +0000)]
Merge "Allow to define custom tee fs paths." into tizen

6 years agoImplement checking of Tizen policies on TA loading. 25/136225/31
u.harbuz [Wed, 28 Jun 2017 15:29:28 +0000 (17:29 +0200)]
Implement checking of Tizen policies on TA loading.

Check if client has Tizen privelege to use TEE.
Allow client to load only TA from its subdirectories.
Allow system applications load TA from system directies.
Add unix socket connection between tee-supplicant and libteec to
allow identify client with cynara.

Change-Id: I8bfecbb4f58f1397d5706cb9af90e0641fbfdec4

7 years agoPackaging changes. 03/136403/4
r.tyminski [Thu, 29 Jun 2017 09:34:29 +0000 (11:34 +0200)]
Packaging changes.

Adding manifest.
Setting root of tee fs to /opt.
Little spec cleanup.
Adding udev and service configuration.

Change-Id: Ife48795a84a2033404a0b76f74c151ce82303820

7 years agoAllow to define custom tee fs paths. 00/134100/3
r.tyminski [Wed, 14 Jun 2017 13:08:11 +0000 (15:08 +0200)]
Allow to define custom tee fs paths.

Adding ifndef for TEE_FS_SUBPATH and TEE_FS_PATH.

Change-Id: I009b49f96094a230ac1b43d90471cd2519ffb7be

7 years agoAdd packaging. 89/131489/6
u.harbuz [Mon, 29 May 2017 10:42:17 +0000 (12:42 +0200)]
Add packaging.

Change-Id: I500d7bb7f45d64e4e7269e85ad5b40a7b43cedca

7 years agoUpdate from upstream to 2.4.0 version 70/132470/1 upstream upstream/2.4.0
r.tyminski [Mon, 5 Jun 2017 11:12:39 +0000 (13:12 +0200)]
Update from upstream to 2.4.0 version

Change-Id: I748163170cec3409645e3990c4c2d774b01f349f

7 years agoInitial commit with upstream sources. 80/131480/1
r.tyminski [Mon, 29 May 2017 10:13:04 +0000 (12:13 +0200)]
Initial commit with upstream sources.

Change-Id: I6af3c03fe09e536b81df3d9f7725f5cf618e3a27

7 years agoInitial empty repository master
Tizen Infrastructure [Mon, 3 Apr 2017 06:36:33 +0000 (23:36 -0700)]
Initial empty repository